substancephp/container

Release historycaution

The package has 13 releases over about 2 years, but only one release in the last 12 months. The recent release and repository push show activity, though the slower cadence raises a modest maintenance concern.

Repo bus factorcaution

One contributor made all commits during the last 3 months. Organization backing provides some handoff capacity, but observed activity is still concentrated.

Repo commit activitycaution

There was one commit in the last 3 months from one active maintainer. Recent activity is positive, but the very low volume indicates limited maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For a small package this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe to depend on.