carono/codegen

Release historycaution

The package has 8 releases since September 2017, but none in the last 12 months and the latest registry release was in October 2022. This is a meaningful staleness concern, although the repository is not archived and was pushed recently.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection, indicating little recent development activity. The recent repository push provides some contrary evidence but does not establish sustained maintenance.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, so there is little community evidence to offset the limited maintenance activity. Low popularity alone is not a severe risk for a small utility.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are reported. The missing scanning capability is a modest transparency gap for a package intended to be consumed as a dependency.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.