wikimedia/password-blacklist

Name lookalikedanger

The package borrows the identity of the much more established wikimedia/css-sanitizer and is explicitly flagged as a lookalike, although artifact overlap is zero; consumers should verify they intended this package.

Registry deprecationdanger

Packagist marks the entire package abandoned and names wikimedia/common-passwords as its replacement, making this release unsuitable for a new dependency.

Release historydanger

The latest registry release was in December 2018, with no releases in the last 12 months, indicating the published package is stale despite its earlier release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, so current maintenance activity is not demonstrated by the source project.

Version stabilitycaution

v0.1.4 is a stable, non-prerelease version, but it does not offset the package-wide abandonment and long period without a registry release.