ddeboer/salesforce-mapper-bundle

Release historydanger

The latest release was about 13 years ago, with no releases in the last 12 months; this is strong evidence that the package is no longer actively maintained.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, reinforcing the abandonment risk shown by the release history.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so package provenance is less transparent. A subpackage could explain a name mismatch, but no provided evidence confirms that here.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool is present. The missing scanner is a hygiene gap, secondary to the much stronger maintenance concerns.

Repository archivedcaution

The repository is not archived, which is a compensating positive, but it was last pushed about 10 years ago and therefore does not offset the stale release history.