common-gateway/bag-bundle

Release historycaution

The latest release was on March 7, 2023, and there were no releases in the following 12 months despite the package being more than three years old at collection time. This is strong evidence of abandonment risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months before collection, consistent with the last push being in March 2023. This materially increases abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a maintenance and transparency gap, though not severe on its own.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the absence does not by itself make the package unfit.

Version stabilitycaution

Version 0.0.4 is not a stable major release, so compatibility expectations are limited. The absence of prerelease labeling avoids an additional concern but does not offset the package's age.