ahs/superdesk-publisher-sdk

Release historydanger

The package has had 5 releases, but none in the last 12 months; its latest release was on November 4, 2019, more than six years ago. This is strong evidence of abandonment risk despite the short early release interval.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. This leaves no recent evidence of ongoing maintenance.

Maintainerscaution

Only one registry account has publish access, and the project is backed by an individual repository owner rather than an organization. This creates a thin publishing and continuity base, though it is supporting evidence rather than the main concern.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. Missing tests and changelog can be normal for published artifacts, but the absent README makes integration and consumer review harder for this SDK.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. That weakens supply-chain hygiene evidence without proving the release is unsafe.