sunnykevin/weather

Dependency profilecaution

The package declares three runtime dependencies, including PHPUnit and Mockery, while declaring no development dependencies. Test frameworks in the runtime dependency set suggest weak packaging discipline and add unnecessary consumer burden.

Release historycaution

This is the package's only release, published nearly eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, though the package is not marked deprecated.

Repo commit activitycaution

The repository has had no commits and no active maintainers in the last three months, while its last push was in November 2018. This confirms that maintenance has effectively stopped.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest supply-chain hygiene gap rather than evidence that the release is unsafe by itself.

Security policycaution

The linked repository has no security policy. For a small package this is a transparency gap, but it is secondary to the much stronger evidence of inactivity.