tom/composer-yeaaah

Package scaffoldingcaution

The published artifact has no README, tests, or changelog. Although tests and changelogs are not expected in every artifact, the missing README reduces transparency for a package consumers must understand.

Release historycaution

This package has only one release, published in November 2018, with no releases in the last 12 months. That long period without a new release is a substantial abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since 2018.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not required for a small package, but these counters provide no supporting evidence of active community use.

Repo toolingcaution

Composer is used as a build tool, which is appropriate, but no security scanning tool is present. For an otherwise inactive project, this provides little compensating evidence of ongoing maintenance.