bangpound/castle-bundle

Release historydanger

Only two releases were published, both in November 2014, with no releases in more than 10 years. This strongly indicates the package is no longer maintained.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the last push being more than 10 years ago, this is strong evidence of abandonment risk.

Project backingcaution

The registry namespace and repository are owned by the same individual account, which supports ownership continuity but provides no broader organizational backing.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little supporting evidence of an active user or contributor community.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap, especially for an inactive package.