difra/binding-bootstrap4

Release historydanger

The package has had no release in more than four years, with five releases concentrated on its first release day and none in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of current maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The build setup is appropriate for the ecosystem, while the missing scanning is a modest maintenance and hygiene concern.

Security policycaution

The linked repository has no security policy, so there is no documented channel or process for handling vulnerability reports. This is a transparency gap, though not severe on its own.