eix/contact

Release historydanger

The latest release was in March 2016, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a dependency.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Low adoption is supporting evidence of limited maturity, though popularity alone is not decisive for a small package.

Repo toolingcaution

Composer and Phing are used for builds, showing basic build structure, but no security scanning tooling is present. The missing scanning is a modest transparency gap.

Repository archivedcaution

The repository is not archived, but its last push was in March 2016. The unarchived status is positive, while the old activity supports the maintenance concern already shown by release history.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is less significant than the package's prolonged inactivity.