fandogh/graphql

Release historydanger

The package has 18 releases but none in the last 12 months; its latest release was in August 2016, roughly 10 years ago. This strongly indicates that the dependency is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in April 2023, current development activity is absent.

Repo package mentioncaution

The repository name does not match the package name, which creates some ownership uncertainty, although the README does mention this package and reduces the concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a package that handles application data, though it is secondary to the much stronger maintenance concern.