elcodi/shipping

Release historydanger

The package has 75 releases, but none in the last 12 months; its latest release was over 10 years ago. This strongly increases abandonment risk despite its historically active release cadence.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the long gap since the last release. This is strong evidence of abandonment risk.

Package scaffoldingcaution

The package includes a readable README, while the absence of tests and a changelog is normal for a published artifact and is not treated as a gap here. The README explicitly describes the component as read-only.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. The missing scanning practice is a modest transparency and maintenance concern for a dependency project.

Security policycaution

The repository has no security policy, leaving no documented route for reporting vulnerabilities. This is a meaningful but secondary gap alongside the maintenance concerns.