alexandermatveev/moment-bundle

Release historydanger

The package has only one release, published about ten years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although the package is not registry-deprecated.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push being about ten years ago. The repository is therefore not showing ongoing maintenance capacity.

Maintainerscaution

Only one registry account has publish access. That alone is administrative metadata, but it offers little visible publishing redundancy alongside the single release and inactive repository.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present. This is a hygiene gap that adds concern to an already inactive project, without proving a security problem.

Security policycaution

The repository has no security policy. This limits vulnerability-reporting transparency, though it is less important than the long-standing lack of maintenance activity.