tomatophp/tomato-category

Dependency profilecaution

Four runtime dependencies form a moderate dependency surface for a PHP package, including the PHP runtime and three TomatoPHP components. This is not excessive, but it creates ongoing compatibility dependency on related packages.

Release historycaution

The package has 12 releases over roughly three years, but no releases in the last 12 months and the latest was in June 2024. This is a meaningful maintenance concern, though the prior regular cadence provides some maturity evidence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last 12 months, this indicates maintenance has gone quiet.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.

Workflow auditcaution

No GitHub Actions workflows were found, so there are no workflow findings or unpinned actions to weigh. This also means the repository provides no workflow-based automation or security checks.