backendtea/un-poly-iconv

Repo commit activitydanger

There were no commits or active maintainers in the last three months, consistent with the repository having been untouched since July 2018. This is the clearest abandonment-risk signal, though the package is very small.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer represents a genuinely thin project backing rather than normal organization publishing hygiene.

Release historycaution

This is the only release, published in July 2018, with no releases in roughly eight years. That strongly limits evidence of ongoing maintenance, although a narrowly scoped stable utility may need few updates.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. For this small package the missing scanner is a modest transparency gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a minor oversight for a tiny package but still reduces maintenance transparency.