codememory/environment

Release historydanger

The package has only three releases, with none in the last five years and the latest published in June 2021. This is strong evidence of abandonment risk despite the short early release interval.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the release history showing that development stopped years ago.

Dependency profilecaution

Six runtime dependencies create a meaningful transitive maintenance surface for a small package, increasing the cost of depending on an otherwise inactive project.

Project backingcaution

The package maps to a user-owned repository rather than an organization-backed project, so the single registry maintainer provides limited visible organizational continuity.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present. The missing scanner is a minor hygiene gap rather than evidence that the release is unsafe.