azhuang/sentry

Release historydanger

The package has only one release, published over seven years ago, with no releases in the last 12 months. This provides little evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months; its last push was over six years ago. That strongly increases abandonment risk.

Licensecaution

The manifest declares Apache, while the artifact license file is recognized as MIT. The release is licensed, but the mismatch creates avoidable legal and transparency uncertainty.

Package file treecaution

The artifact contains only 11 files, including a single source file and bundled Composer files, with no visible documentation or broader project structure. This is consistent with a very small package but offers limited transparency.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is present. This is a hygiene gap rather than evidence that the release is unsafe on its own.