dejvidecz/assets-loader

Release historydanger

The package has had no release in more than seven years, with all eight releases concentrated on April 18, 2019. This is strong evidence of abandonment for a framework integration package.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since April 2019. This materially increases abandonment risk.

Licensecaution

The artifact includes a license file and the repository also has one, but the detected BSD-3-Clause license conflicts with the manifest declaration of GPL-2.0 and GPL-3.0. That mismatch requires clarification before adoption.

Project backingcaution

The package and repository are associated with the same individual user account rather than an organization. This does not prove a problem, but it provides limited visible backing for a dormant project.

Security policycaution

The repository has no published security policy. For a package that processes application assets, this weakens transparency and gives maintainers no clear public security-reporting path.