aplia/apublish

Dependency profilecaution

The package declares 20 runtime dependencies for a large legacy publishing framework. This broad dependency surface increases maintenance exposure, though the dependencies are explicitly declared.

Release historycaution

The package has 17 releases since December 2017, but none in the last 12 months; the latest release was over two years ago. This indicates stalled maintenance for a framework dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's lack of recent releases. This is a meaningful abandonment concern.

Repo popularitycaution

The repository has zero stars and only two forks. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of a broad support community.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The build setup is present, while automated security hygiene is limited.