skowronline/query-param-validator-bundle

Release historydanger

The package has only one release, published in May 2016, with no releases in the last 12 months. That is strong evidence of an unmaintained dependency.

Maintainerscaution

Only one registry maintainer is listed, leaving limited visible publishing capacity. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in August 2022, current development activity is absent.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem. No security-scanning tools are present, a modest transparency gap for a dependency intended for application use.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is secondary to the much stronger maintenance concerns.