egorryaroslavl/partners

Release historydanger

This package has only one release, published more than nine years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and leaving maintenance risk uncompensated.

Maintainerscaution

Only one registry maintainer is listed, so there is little visible publishing capacity. The repository is user-owned rather than organization-backed, making this thin maintainer base more concerning.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present. This is a modest transparency and maintenance gap, especially for an old dependency with no recent activity.

Security policycaution

The repository has no security policy. That weakens the project's disclosure and response transparency, although it is not by itself evidence that the package is unsafe.