vkcom/kphp-polyfills

Release historycaution

The package has 44 releases since November 2020, but none in the last 12 months and its latest registry release was in December 2024. The long historical cadence is positive, while the current release gap is a meaningful maintenance caution.

Repo bus factorcaution

All recent commits came from one contributor. The organization-owned repository provides some handoff capacity, but the observed maintenance activity remains concentrated.

Repo commit activitycaution

There was one commit in the last three months from one active maintainer. The recent activity is better than no activity, but it is too sparse to offset the absence of registry releases fully.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself show abandonment.