cr46/coord-transform

Release historydanger

The package has had only two releases, both in February 2018, with no releases in over eight years. This is strong evidence of abandonment for a dependency that may need fixes or compatibility updates.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since February 2018. This materially increases maintenance risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source-package relationship is not clearly established. That weakens transparency and makes provenance harder to verify.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tooling is present. This is a modest visibility gap rather than evidence of an unsafe release.

Security policycaution

The linked repository has no security policy. For an inactive package, this leaves no clear reporting path if a vulnerability is found.