absolvent/bundle-api

Release historydanger

The package has had no releases in over eight years, despite 19 historical releases. That long gap is strong evidence of abandonment risk for a dependency receiving future updates.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being nearly six years ago. This is a severe abandonment concern for a package intended to support application authentication.

Dependency profilecaution

The package declares eight runtime dependencies, including a framework and authentication components. This is a meaningful dependency surface to maintain, but the signal does not show an excessive or obviously unsafe dependency profile by itself.

Repo popularitycaution

The repository has zero stars and one fork, with eight watchers. Low popularity is only supporting evidence, but it suggests limited community capacity to notice or address problems.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported. The missing scanning is a hygiene gap that adds little confidence alongside the broader maintenance concerns.