thecodingmachine/service-provider-bridge-bundle

Release historycaution

The package has seven releases since 2016, but none in the last 12 months and its latest registry release is from November 2017. That long release gap raises abandonment risk.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. Combined with the old release history, this is the strongest evidence of stalled maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The missing scanner is a hygiene gap rather than evidence that the package is unsafe to depend on.

Repository archivedcaution

The linked repository is not archived, and it was last pushed in July 2020. This is better than an archived project but still leaves several years without observed repository updates.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not by itself evidence of abandonment or a severe dependency risk.