phpcr/phpcr-shell

Dependency profilecaution

Eleven runtime dependencies make the package meaningfully dependent on a wider ecosystem, but the profile is explicit and includes established project components rather than an unexplained dependency burden.

Maintainerscaution

Only one registry publishing account is listed, which is a limited publishing base; the organization-owned repository provides some backing but does not eliminate single-account publishing risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that ongoing development has paused despite the recent release.

Repo issue activitycaution

There are 30 open issues and three open pull requests, with no issues or pull requests closed in the last month; this suggests unresolved maintenance workload.

Repo toolingcaution

Composer and Box provide build tooling, but no security scanning tools are configured, leaving a security-hygiene gap in the project process.