cang-ha/contacts-importer

Release historydanger

The package has only one release, published in November 2018, with no releases in the last 12 months. This is strong evidence of abandonment for a package integrating changing third-party OAuth services.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the past three months, consistent with the package having received no maintenance since November 2018.

Dependency profilecaution

Five runtime dependencies, including several OAuth client libraries and Guzzle, create some maintenance exposure because their compatibility may evolve. The dependency count is still manageable rather than excessive.

Maintainerscaution

Only one registry account has publishing access. Because the repository is user-owned and recent activity is absent, there is limited visible continuity if that maintainer does not return.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap for a package handling OAuth credentials.