webflorist/formfactory

Release historydanger

The package has 13 releases over about six years, but none in the last four years; this is strong evidence of stalled maintenance for a library dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, following a last push in September 2022. That sharply raises abandonment risk.

Repo issue activitycaution

Two issues remain open, with no issues or pull requests opened or closed in the last month; this is consistent with the broader lack of recent activity.

Repo popularitycaution

The repository has one star and two forks, so there is little external adoption evidence. Popularity is supporting evidence only and does not outweigh the maintenance record.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a hygiene concern, not proof of unsafe code.