vincet/base-bundle

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk even though the specific release is not separately withdrawn.

Release historydanger

The package has 12 releases, but none in the last 12 months; its latest release was October 25, 2016, nearly 10 years ago. That indicates prolonged release abandonment.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the latest release. The absence of recent maintenance materially increases abandonment risk.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. This is a secondary hygiene concern beside the stronger maintenance signals.

Repository archivedcaution

The linked repository is not archived, which is a positive counter-signal to abandonment, but its last push was October 25, 2016 and does not outweigh the package-level deprecation and inactive commit history.