toposort

Project backingcaution

The repository is owned by the individual user marcelklehr rather than an organization. This gives less visible organizational continuity, but the matching repository and package evidence provide useful ownership transparency.

Release historycaution

The latest release was in April 2018, with no releases in the last 12 months. That long publishing gap lowers confidence in ongoing maintenance, although the package is mature and has 23 releases overall.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with a largely dormant project. This is concerning for maintenance responsiveness but not evidence of abandonment by itself.

Repo toolingcaution

The repository uses Make for builds, but no security-scanning tools were detected. The missing scanning is a transparency and hygiene gap rather than a severe risk for this small package.

Security policycaution

No security policy was found in the linked repository. This weakens vulnerability-reporting transparency, though the package's small dependency footprint limits the practical impact.