affinity4/config

Release historycaution

The package has had no release in more than four years, with zero releases in the last 12 months. This raises maintenance and abandonment concerns despite the repository receiving a recent push.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a direct maintenance concern, although the recent repository push provides some counterevidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not a standalone severe risk.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.