cegrent/voltage-api

Release historydanger

The package has only one release, published about four years ago, with no releases in the last 12 months. That strongly suggests abandonment risk despite the package not being registry-deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's roughly four-year release gap. This is strong evidence of inactive maintenance.

Lifecycle scriptscaution

The package runs a post-root-package-install script during installation. Install-time behavior adds some supply-chain exposure and deserves caution, although this alone does not make the release unfit.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although organization-backed repositories can contain subpackages, this leaves uncertainty about whether the linked source belongs to this release.

Security policycaution

The linked repository has no security policy. For a package that connects Laravel applications to an API, this reduces vulnerability-reporting transparency, though it is secondary to the inactivity evidence.