What composer audit --abandoned misses in 31 PHP projects
129 of the 4,109 production packages in 31 open-source PHP applications are marked abandoned on
Packagist, archived on GitHub, or have gone five years without a stable release or a push.
composer audit --abandoned reports 62 of them. The lock files are wallabag's, Matomo's,
Magento's, Drupal's, Joomla's, phpBB's, Moodle's, PrestaShop's and 23 more, read on 2026-09-19
with --no-dev.