devitek/monga

Release historydanger

The package has had no release in about nine years: all 22 releases were published in 2017, with none in the last 12 months. This is strong evidence of abandonment despite the stable version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of ongoing maintenance.

Maintainerscaution

Only one registry publishing maintainer is listed. The organization-backed repository provides some context, but the observed release and commit inactivity still leaves limited maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens supply-chain hygiene without proving the package is unsafe.

Security policycaution

The repository has no security policy. This is a transparency gap, particularly for a database abstraction library, though it is secondary to the much larger maintenance risk.