dekuan/depay

Release historydanger

All seven releases appeared within roughly one day in December 2017, and there have been no releases in nearly nine years. That strongly suggests the package is abandoned rather than actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates since 2017. No provided signal compensates for this maintenance gap.

Licensecaution

The artifact includes an MIT license file, so the release is licensed, but its manifest declares a proprietary license while the detected license is MIT. That mismatch reduces transparency and should be resolved before adoption.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security scanning is configured, a minor hygiene gap that is outweighed by the more serious inactivity.

Repository archivedcaution

The repository is not archived, which avoids the strongest abandonment signal, but its last push was in December 2017 and does not offset the lack of current activity.