agencednd/google-manufacturer-bundle

Release historydanger

The package has only two releases, both published about 6 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since April 2020.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, making the package-to-source relationship less transparent. The organization-backed repository and matching bundle structure provide some compensation.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds a transparency gap, though it is less serious than the prolonged inactivity.