afety/yaf-skeleton

Release historydanger

The latest release was in November 2021, with no releases in the following nearly five years. That is strong evidence of abandonment risk for a package intended as a maintained project skeleton.

Dependency profilecaution

The package declares 17 runtime dependencies, including several framework, database, queue, and extension requirements. This creates a substantial compatibility and maintenance burden for an otherwise small skeleton.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad community review or support. Low popularity is supporting evidence rather than a decisive failure for a small skeleton.

Repository archivedcaution

The repository is not archived, which leaves a path for maintenance, but its last push was in April 2022 and does not offset the long release gap.

Security policycaution

The linked repository has no security policy. This reduces transparency around vulnerability reporting, although it is not by itself evidence that the package is unsafe.