cheppers/robo-sass

Registry deprecationdanger

Packagist marks the package as abandoned and names sweetchuck/robo-sass as the replacement. This is a direct warning against taking a new dependency on this package.

Release historydanger

The latest release was published nearly seven years ago, with no releases in the last 12 months and only three releases overall. That strongly suggests the registry package is no longer maintained.

Lifecycle scriptscaution

The package defines post-install and post-update scripts, so dependency installation can execute package-controlled commands. No separate evidence shows these scripts are unsafe, but they increase supply-chain exposure.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, there is no recent development evidence to offset the stale release history.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, especially for a package that already shows limited recent maintenance.