barbosa/packager

Release historydanger

The package has only one release, published about 9 years and 11 months ago, with none in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Its non-archived status does not compensate for the lack of observed recent maintenance.

Repo toolingcaution

Composer is used for build and package management, but no security scanning tooling is present. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much stronger evidence of prolonged inactivity.