elliotsawyer/anticlickjack

Project backingcaution

The package and repository are owned by an individual rather than an organization, so the single registry maintainer reflects a genuinely thin backing structure rather than normal organizational publishing hygiene.

Release historycaution

This is a single-release package first published about seven years ago, with no releases in the last 12 months. That is a substantial maintenance concern, though a small stable shim may need few changes.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the single historical release, this leaves no evidence of current maintenance capacity.

Repo toolingcaution

The repository uses Composer for its build and dependency workflow, which fits the package ecosystem. No security scanning tools are configured, a minor transparency and hygiene gap for a dependency package.

Repository archivedcaution

The linked repository is not archived, so it remains available for maintenance. Its last push was about seven years ago, which supports the broader concern about inactivity.