basje/skeleton-app

Release historydanger

The latest release was published in October 2016, nearly 10 years ago, with no releases in the last 12 months. Only three releases exist, indicating a largely abandoned release line.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stale release history and leaving no evidence of ongoing maintenance.

Licensecaution

Neither the package nor the linked repository provides a declared license or license file, leaving the legal terms for using this dependency unclear.

Repo toolingcaution

Composer is used for the build, which fits the package, but no security scanning tools are present. Given the package's age, this provides little evidence of maintained security hygiene.

Security policycaution

The repository has no security policy, so it provides no documented process for reporting or handling vulnerabilities. This is a transparency gap, though not severe on its own.