yalexyu/php-fb-msgr-sdk

Release historydanger

The package has had no releases in the last 12 months, and its latest release was published in January 2017 despite being over nine years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the repository's last push in January 2017. This indicates the project is effectively dormant.

Package scaffoldingcaution

Tests are present in the artifact and repository, which is a small positive, but the package has no README for consumers. The missing changelog is normal packaging practice and is not a concern by itself.

Repo popularitycaution

The repository has only 2 stars and no forks, providing little evidence of broad community use or outside validation. Popularity is supporting evidence, but it reinforces the maintenance concern here.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security-scanning tool is configured. That leaves dependency and source issues less likely to be detected automatically.