cast/cubehash

Project backingcaution

The repository is owned by an individual account rather than an organization, so the small registry maintainer context has no organizational backing to offset the limited activity evidence.

Release historycaution

The latest release was more than six years ago, with no releases in the last 12 months. That substantially raises maintenance and compatibility risk for a dependency.

Repo commit activitycaution

There were no commits from active maintainers in the last three months. The recent repository push shown elsewhere is a positive availability signal, but it does not demonstrate sustained development.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these figures provide little supporting evidence of broad review or adoption.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.