bulldozer/feedback

Release historydanger

This package has only one release, published in February 2018, with no releases in the last 12 months. That long, complete release gap is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no maintenance since February 2018.

Package scaffoldingcaution

The published artifact has no README, which makes a library module harder to integrate; the absence of tests and a changelog is normal packaging practice and is not penalized.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented. The small, inactive project provides no compensating process here.