dpi/drupal-local

Release historydanger

The package has only two releases, with no release in the last 12 months and the latest published in October 2022. That long release gap is a substantial maintenance concern, although the package is not deprecated.

Repo commit activitydanger

The repository recorded no commits and no active maintainers during the last three months, consistent with activity having stopped nearly four years ago. This is the strongest abandonment signal in the assessment.

Project backingcaution

The repository is owned by a personal user account rather than an organization, so there is no demonstrated organizational backing to compensate for the thin maintenance evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is secondary to the stale release and commit history.

Security policycaution

The repository has no security policy. For a development scaffold this is a meaningful transparency gap, but it is not as serious as the evidence of prolonged inactivity.