adaptech/finapi-webform

Release historydanger

The package has only one registry release, published in January 2022, with no releases in the following four years. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months of the assessment period, consistent with the long release gap. No provided signal shows recent maintenance to offset this.

Repo package mentioncaution

The repository name matches the package, supporting that it is the intended source, but the README does not mention the package name. This creates a small transparency concern without proving the repository is unrelated.

Repo popularitycaution

The repository has one star, one fork, and one watcher, indicating a very small user and contributor footprint. Popularity is supporting evidence only, but it provides little compensating confidence for the maintenance gap.

Repo toolingcaution

Composer build tooling is present, showing a defined packaging path. However, the absence of security scanning tools leaves a modest oversight gap.