alistairshaw/vendirun

Release historydanger

The package has 39 releases since August 2016, but none in the last 12 months; the latest release was in March 2018, over eight years ago. This strongly indicates abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, with no newer release activity to compensate for the inactivity.

Maintainerscaution

Only one registry publisher is listed, leaving little visible publishing redundancy; the repository is user-owned rather than organization-backed, so this remains a real resilience concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest repository hygiene gap.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations.