chinademo/distpickerf

Release historydanger

The package has had only one release, published over six years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk.

Project backingcaution

The source repository is owned by an individual user rather than an organization, so there is no visible organizational backing to compensate for the thin release history.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository is the authoritative project source.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful community backing.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling is present. This is a modest transparency and maintenance gap, not a standalone severe risk.