cobaia/attach

Release historydanger

The latest release was published in November 2014, with no releases in the last 12 months; nearly 12 years without a release is strong abandonment evidence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, and its last push was over 10 years ago. The repository is not archived, but that does not offset the prolonged inactivity.

Maintainerscaution

Only one registry account can publish the package, leaving little publishing redundancy. This is a modest concern because the repository is identified as an individual-owned project rather than an organization-backed one.

Security policycaution

The linked repository has no security policy, which limits transparency about vulnerability reporting. This is a secondary concern beside the much older release and commit history.