t4web/composer-lock-parser

Release historycaution

The package has made no release in more than four years, despite nine releases overall; this is meaningful evidence of stagnation for a library dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, adding abandonment risk alongside the long release gap.

Security policycaution

The repository has no security policy, a modest transparency gap for reporting vulnerabilities, though this is less serious for a small parser with no install scripts.