codeq/replacewithshy

Release historydanger

The package has had only 3 releases, all concentrated in April 2018, with no releases in the last 12 months and an age of about 8 years. This strongly limits evidence of ongoing maintenance.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, consistent with a project that has been inactive for years. This is the clearest abandonment concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a maintenance-hygiene gap, though it is not severe by itself.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. For an inactive package, this adds to maintenance uncertainty.