bstorck/hello-world

Release historydanger

The latest release was about seven years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a package receiving a new dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Repo package mentioncaution

The linked repository is named composer-test rather than this package and its README does not mention bstorck/hello-world. That raises concern that the source repository may not clearly belong to the published package.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. For this small package that is a modest transparency gap, not a severe risk by itself.

Repository archivedcaution

The linked repository is not archived, although its last push was about seven years ago. The active archive status does not compensate for the observed inactivity.