discountkitchenfactory/core

Release historydanger

The latest release was in November 2018, with no releases in the last 12 months and a package age of about 7 years and 11 months. This is strong evidence of abandonment risk for a dependency.

Maintainerscaution

Only one account has registry publish access, which is a thin publishing base. The organization-owned repository provides some backing, so this is a concern rather than a severe risk by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although it was pushed in March 2024, current development activity is absent.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. This weakens visible dependency and vulnerability hygiene, while the basic build tooling is present.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though it does not by itself make the release unfit.