depa/depa-tooling

Release historydanger

The package has had no release in nearly six years: its latest release was in November 2020, with zero releases in the last 12 months. Four releases show an established history but do not offset the prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating a high abandonment risk.

Maintainerscaution

Only one registry account can publish releases, which limits publishing resilience. The organization-owned repository provides some backing and makes a short registry maintainer list less concerning.

Package scaffoldingcaution

The artifact includes a README, but it is only 14 characters long and provides little consumer guidance. Missing tests and a changelog are normal packaging practice, while the GitHub release provides some release transparency.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.