detain/assetic

Release historydanger

The latest registry release was nearly nine years ago, with no releases in the last 12 months. That is strong evidence of stalled maintenance for a dependency, despite the 20-release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This reinforces the concern that the project is no longer actively maintained.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This is a transparency gap, though it does not by itself make the package unfit.