spol/path

Release historydanger

The latest release was in February 2015, with no releases in the last 12 months. This long release gap is strong evidence of abandonment risk, although the package was previously released regularly.

Project backingcaution

The package and repository are owned by the same individual account, providing clear ownership but no organizational backing signal to offset the thin maintenance history.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The missing scanning is a minor repository hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response. This matters more because the project has otherwise shown little recent activity.

Version stabilitycaution

Version v0.1.3 is not a stable major release, so compatibility guarantees are limited. It is not marked as a prerelease, which partially offsets the concern.