bolt/pathogen

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement package provided. Package-level deprecation is a severe warning for taking a new dependency.

Release historydanger

The package has only two releases, with no release in the last 12 months and a median interval of about 950 days. This indicates very weak ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with abandonment.

Repository archiveddanger

The linked repository is archived and was last pushed in July 2017, indicating the source is no longer actively maintained.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The missing scanning is a modest transparency gap, though the stronger abandonment signals dominate the assessment.