edbizarro/bi-connect

Release historydanger

The latest release was in May 2019, with no releases in the last 12 months despite the package being over 8 years old. This is a strong maintenance and abandonment concern.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no recent development activity. The repository's 2023 push does not compensate for the current multi-year release gap.

Dependency profilecaution

The package declares 10 runtime dependencies, including several large third-party analytics SDKs, creating a broad dependency surface that can increase upgrade and compatibility burden. This is a moderate concern rather than evidence that the package is unfit on its own.

Project backingcaution

The registry namespace and repository owner match, so the source appears associated with the publisher rather than an unrelated project. The owner is an individual account, which provides less organizational continuity than an established organization but is not itself evidence of abandonment.

Security policycaution

No repository security policy is present, leaving vulnerability-reporting expectations unclear. This is a transparency gap, although it is secondary to the much larger inactivity concern.