conduction/commongroundbundle

Release historydanger

The package has only two releases, with none in the last 12 months; its latest release was nearly five years ago. This is strong evidence of stalled maintenance, despite the long interval between earlier releases not proving abandonment alone.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in September 2022. This materially raises abandonment and future compatibility risk.

Dependency profilecaution

The package declares 23 runtime dependencies, including framework, database, payment, and authentication components. That broad dependency surface increases compatibility maintenance needs, especially for an old release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one issue and two pull requests remain open. This is consistent with low ongoing project activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest repository hygiene gap rather than evidence that the package is unsafe.