factorio-item-browser/api-import

Release historydanger

The package has had no release in over five years and none in the last 12 months, despite eight releases overall. This is a meaningful maintenance and abandonment concern.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a project whose maintenance has gone quiet. The organization backing provides context but does not replace current activity.

Dependency profilecaution

Fourteen runtime dependencies create a relatively broad dependency surface for this import utility, increasing maintenance coupling. The provided signal does not show vulnerable or abandoned dependencies, so this is a limited concern.

Lifecycle scriptscaution

A post-autoload-dump install script runs during Composer installation. This is a supply-chain surface that warrants awareness, but the signal does not show that the script is harmful.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.