thunbolt/core

Release historydanger

The package has only two releases, with the latest in July 2017 and none in the last 12 months. That long release gap is strong evidence of abandonment risk.

Licensecaution

No registry license declaration, license file, or repository license file was detected. This creates a material legal and transparency concern for adoption.

Package scaffoldingcaution

The artifact has no README, while the exact version has GitHub release notes stating that PHP 7.1 is required. The release notes help document compatibility, but the missing consumer documentation remains a gap.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide little supporting evidence of an active user or contributor base.

Repo toolingcaution

Composer is used for the build, which is appropriate for a Packagist package, but no security scanning tooling is present. This is a modest transparency and maintenance weakness.