vesic/benchmark

Release historydanger

This package has only one release, published about 9 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency intended for ongoing use.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months; its last push was in May 2017. This confirms that the project is not being actively maintained.

Dependency profilecaution

The package declares phpunit/phpunit as its sole runtime dependency, which is unusual for a small benchmarking utility and may impose unnecessary production dependency and compatibility costs.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no indication of a user or contributor community to offset the inactivity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. For a small package this is a modest transparency and maintenance gap rather than a severe risk.