aguardo/proyecto_daw_2017

Release historydanger

The package has only two releases, both published in January 2018, and none in the last 12 months; the latest release is more than eight years old. This is strong evidence of abandonment risk despite the short initial release interval.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for more than eight years. The repository being available does not compensate for the lack of recent maintenance.

Lifecycle scriptscaution

The package uses post-create-project-cmd and post-install-cmd scripts, which add installation-time behavior and therefore some operational risk. This is not severe on its own, but it warrants review before automated installation.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The absence of scanning adds a modest maintenance and transparency concern, while the lack of workflows avoids workflow-specific risk.

Security policycaution

The linked repository has no security policy. For an old web application template, the lack of a documented security-reporting process is a genuine transparency gap, though it is less important than the prolonged inactivity.