smt/open-popo

Release historydanger

The package has had only two releases, both in November 2015, with no release in nearly 11 years. This is strong evidence of abandonment risk for a dependency.

Dependency profilecaution

The package declares phpunit/phpunit as a runtime dependency, which is unusual for a testing helper library and may add unnecessary production dependency weight. The signal provides no evidence that this dependency is actively maintained alongside the package.

Repo issue activitycaution

Three issues remain open, while there were no new or closed issues and no pull requests in the past month. Combined with the old last release, this supports a lack of ongoing maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of a broad user or contributor base.

Repo toolingcaution

Composer is used for builds, which fits the ecosystem, but no security scanning tools are present. This is a modest transparency and maintenance concern rather than evidence that the release is unsafe.