vsavritsky/sonata-media-liip-imagine

Release historydanger

The package has had no release in about 7 years, with 0 releases in the last 12 months. This is strong evidence of abandonment risk, although the stable version and small scope provide limited compensation.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. This materially increases abandonment and compatibility risk.

Dependency profilecaution

The package has only 4 runtime dependencies, centered on Symfony, Liip Imagine, and Sonata Media, so its dependency surface is relatively narrow. The old release date still leaves compatibility risk with current dependency versions.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no provided organizational backing to compensate for the inactive maintenance record.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. The missing scanning is a maintenance hygiene concern rather than proof of unsafe code.