vergil-lai/lexsift-php

Project backingcaution

The package and repository are owned by the same individual account. That is consistent ownership, though it does not provide the resilience of organizational backing.

Release historycaution

This is the first release, published less than one hour before collection, so there is no release history to demonstrate sustained maintenance. Its very recent publication makes this an evidence gap rather than proof of abandonment.

Repo commit activitycaution

The repository has no commits or active maintainers in the past three months, so ongoing maintenance is not yet demonstrated. Because the package itself is newly published and the repository was pushed immediately beforehand, this is a maturity concern rather than severe abandonment evidence.

Repo toolingcaution

The project uses Composer, but no security scanning tooling was detected. The missing scanning automation is a modest hygiene gap, not evidence that the package is unsafe or unmaintained.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency slightly but does not by itself make the release unfit to use.