experteam/api-base-bundle

Dependency profilecaution

The release declares 21 runtime dependencies, creating a substantial compatibility and upgrade surface for consumers. The profile is not inherently unsafe, but it increases maintenance burden.

Maintainerscaution

Only one registry publishing account is listed. The matching repository and established release history provide some context, but the publishing base remains narrow.

Release historycaution

The package has 179 releases over more than five years, but there have been no releases in the last 12 months and the latest release was over a year ago. Its long history partly offsets the recent release gap.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. A repository push within the broader recent period provides some evidence against abandonment, but current development activity is thin.

Security policycaution

The linked repository has no security policy, which leaves vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence of a security incident.