daverandom/shitwork

Release historydanger

The package is about 10 years old, has only 8 releases, and has had no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last 12 months, this leaves weak evidence of ongoing maintenance.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. This is a maintenance and assurance gap, though not severe by itself.

Security policycaution

The repository has no security policy, leaving no documented reporting path for vulnerabilities. This is a transparency gap rather than proof of insecure code.