btccom/cashaddress

Release historydanger

The package has only three releases, all apparently concentrated at its first release on January 3, 2018, with no releases in the last 12 months. About eight years without a new release is a substantial maintenance concern.

Repo issue activitycaution

One issue and one pull request remain open, while none were opened or closed in the last month. This indicates little recent project activity, though it is not evidence of abandonment by itself.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. While a subpackage can legitimately use a differently named repository, both signals together make package provenance less clear.

Repo popularitycaution

Eight stars and five forks show a small user and contributor footprint. Low popularity is only supporting evidence, but it provides limited external validation and resilience.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tooling is present. This is a modest transparency and maintenance gap.