chouvc/ealing-packagest-addons

Release historydanger

This is the package's only release, published over eight years ago, with no releases in the last 12 months. That strongly suggests abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the single old release, this is strong evidence of an unattended project.

Dependency profilecaution

The package declares three runtime dependencies and no development dependencies. This is a small enough dependency surface to inspect, though the lack of development dependencies offers little evidence of project maintenance.

Repo toolingcaution

Composer is used for builds, but the repository has no security scanning tools. That is a meaningful maintenance and transparency gap for a package intended to be installed as a dependency.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This adds a transparency gap, especially for an unmaintained package.