yll1024335892/phptools

Release historydanger

This is the package's only release, published over seven years ago, with no releases in the last 12 months. That strongly suggests the package is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating substantial abandonment risk.

Licensecaution

The manifest declares MIT, but the artifact also contains LGPL-2.1 and LGPL-3.0 license files for bundled libraries. Those files may cover dependencies rather than the package itself, but the licensing boundaries should be clarified.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops supporting the package.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much older maintenance record.