clue/promise-timeout

Registry deprecationdanger

Packagist marks the package abandoned at package scope, with no replacement different from the package itself. That is a serious warning for a new dependency despite the maintained-looking source repository.

Release historycaution

The package has existed for over 10 years with 15 releases, but it has had no release in the last 12 months and its latest release was over two years ago. This points to stalled registry maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. That weakens the evidence of ongoing maintenance, although the repository is not archived.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. This creates some uncertainty that the repository is the authoritative source, even though the repository structure otherwise resembles the package.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is less significant than the package-level abandonment and release-history concerns.