youshido/silex-graphql

Licensedanger

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. That creates a substantial adoption and redistribution concern for an open-source dependency.

Release historydanger

Only two releases were published, both in 2016, with no releases in the last 12 months. This strongly indicates the package is no longer maintained for current consumers.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in 2016. This is strong evidence of abandonment risk.

Repo toolingcaution

The repository uses Composer, which supports reproducible package installation, but no security scanning tooling was detected. This is a modest transparency and maintenance weakness rather than evidence of an unsafe package.

Security policycaution

No repository security policy was found. For a small, dormant package this reduces the available disclosure and maintenance information, though it does not by itself establish a severe risk.