craftsmancoding/repo-starter

Release historydanger

The package has only one release, published nearly 12 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a package developers may build on.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since its last release. No provided signal shows compensating recent maintenance.

Licensecaution

The artifact includes recognized GPL-2.0 license files, so licensing is present; the detected GPL-2.0 text differs from the manifest’s GPL-2.0+ declaration and warrants checking the intended terms.

Maintainerscaution

The registry lists one maintainer named “Your Name Here,” which suggests incomplete publishing metadata, although the organization-owned repository provides some backing context.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package handling, but no security scanning tooling is reported. This is a modest hygiene gap rather than evidence of unsafe code.