aaemnnosttv/shortcode-alias-api

Release historydanger

The package has only one release, published about 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency intended to remain maintained.

Repo commit activitydanger

The repository recorded no commits or active maintainers in the last 3 months, and its last push was about 8 years ago. The repository is not archived, but the prolonged inactivity still materially raises abandonment risk.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops supporting the package.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package handling, but the repository reports no security scanning. That is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it is secondary to the package's much older release and repository activity.