cekurte/tdd

Release historydanger

The latest release was over 10 years ago, with no releases in the past 12 months. That is strong evidence of abandonment for a library dependency, despite its earlier release history.

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and increasing maintenance risk.

Lifecycle scriptscaution

The package runs a post-install-cmd script during installation. Install-time code adds supply-chain and reproducibility exposure, even though this signal alone does not show malicious behavior.

Repo popularitycaution

The repository has only 2 stars and no forks or watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of an active user or contributor community.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response, with no provided evidence of compensating security processes.