vinceurag/sr_installer

Release historydanger

The package has had only two releases, both in December 2016, and none in the last 12 months. This long period without releases is a major abandonment concern.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing a project that has not visibly been maintained for years.

Dependency profilecaution

Four runtime dependencies, including Guzzle and Symfony components, are a moderate dependency surface for an installer and increase the amount of code that must remain compatible.

Maintainerscaution

Only one registry account has publishing access. Because the repository is user-owned, this is not inherently abnormal, but it provides little visible maintainer redundancy.

Package file treecaution

The artifact contains source code and a substantial vendored dependency tree, showing it is packaged for use, but the tree also indicates dependencies are bundled directly rather than merely declared.