vection-framework/vection

Release historydanger

The package has had no release for more than five years, with zero releases in the last 12 months. Its earlier releases were reasonably regular, but the long current gap is a substantial abandonment concern.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the stale release history, this strongly suggests that maintenance has effectively stopped.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. The missing scanner is a process gap, though it is less serious than the maintenance inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a framework library.

Version stabilitycaution

Version v0.3.4 is not a stable major release, and the package documentation says its API and PHP requirements may still change. This increases compatibility risk for adopters.