birks/wxbase

Release historydanger

The package has only one release, published about eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the stable 1.0.0 version.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap. No provided signal shows current maintenance capacity.

Package scaffoldingcaution

The artifact includes a README, but it is only 8 characters long and provides almost no consumer guidance. The missing tests and changelog are not concerns for a published package, while release notes for version 1.0.0 are a small positive.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is present. That weakens ongoing supply-chain hygiene, with the impact limited because no dangerous workflow behavior was observed.

Security policycaution

The linked repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency and maintenance gap, though it is less serious than the prolonged inactivity.