devbr/canvas

Release historydanger

The package has only one release, published over eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need fixes or updates.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in May 2018. The long period without observed development materially increases abandonment risk.

Maintainerscaution

Only one registry account has publish access. The organization-backed repository provides some context, but there is still little evidence of an active publishing bench.

Repo popularitycaution

The repository has zero stars and forks, with two watchers. Popularity is not decisive, but these counters provide no supporting evidence of broad adoption or community resilience.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools are configured. The missing scanner is a modest transparency and maintenance gap, not evidence that the package is unsafe.