travisjryan/twilio

Risky to adopt: Packagist marks this package abandoned and recommends aloha/twilio, while the latest release is from February 2021 and there has been no recent commit activity. The linked repository is still present and has tests and security tooling, but that does not offset the package's deprecated status.

Latest 5.0.0

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

The package is explicitly marked abandoned at the package level, with aloha/twilio listed as the replacement. This is a severe dependency-maintenance warning even though the linked repository still exists.

Release history

The latest release was published in February 2021, with no releases in the last 12 months. That long release gap materially increases the risk of depending on an obsolete integration.

Project backing

The registry namespace and repository owner differ, and the repository is owned by an individual rather than an organization. The README mention supports the linkage, but the ownership mismatch leaves less transparent backing than a directly aligned project.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. This indicates no recent maintenance capacity, although the repository is not archived.

Security policy

No security policy was found in the repository. This is a modest transparency gap, but it is secondary to the package's abandonment and inactivity signals.