blar/hash

Release historydanger

The package has had one release, published in November 2015, with no releases in the last 12 months. That long absence of releases is a substantial maintenance and compatibility concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this indicates prolonged inactivity and raises abandonment risk.

Project backingcaution

The package and repository are owned by the same individual account, providing clear ownership but no evidence of organizational backing or a broader maintenance team.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. This is a modest transparency gap, though the package's small scope and long inactivity limit the significance of missing automation.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, but it is secondary to the clearer maintenance concerns.