derickr/gpx-utils

Release historycaution

The package has only three releases and none in the last two years, indicating a release cadence that may have stalled. This is a meaningful maintenance concern for a library dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but current maintenance activity is absent.

Repo package mentioncaution

The linked repository is named gpx-tools rather than gpx-utils and its README does not mention the package, so the source-to-package relationship is not transparent.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools are present. This is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This adds a modest maintenance concern for a library.