darling/roady

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, which is meaningful abandonment risk for a beta framework.

Maintainerscaution

Only one account has registry publishing access, creating a thin publisher base. The repository is user-owned rather than organization-backed, so there is no provided organizational backing to offset that concentration.

Release historycaution

The package has 143 releases since February 2021, but only two releases in the last 12 months, indicating that current maintenance is much slower than its historical release count suggests.

Repo toolingcaution

The repository uses Composer, but no security scanning tools are configured. Build tooling supports reproducibility, while the missing scanner is a maintenance and transparency gap.

Security policycaution

The repository has no security policy, leaving maintainers' vulnerability-reporting process unclear. This is a hygiene concern rather than evidence that the package is unsafe.