yezuozuo/php-coverage

Release historydanger

The package has only one release, published in October 2016, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency, despite the stable 1.0.0 version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. This materially reduces confidence that defects or compatibility issues will be addressed.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of adoption or community backing. Popularity is not decisive by itself, but it reinforces the maintenance concern here.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security scanning tools are configured. That is a transparency and hygiene gap, though it is less significant than the lack of recent maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This lowers transparency for a package intended as a dependency.