coresite/corebundle

Release historydanger

The latest release was about nine years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment risk despite a previously regular release interval.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap. This leaves little evidence of ongoing maintenance.

Maintainerscaution

Only one registry account has publishing access, which creates a thin operational base for a package with no recent release activity. The linked project is user-owned rather than organization-backed.

Repo popularitycaution

The repository has one star and no forks, providing little supporting evidence of community use or review. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concerns.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for a dependency, though it is not evidence of malicious behavior.