fangxu/donews-user-action

Release historydanger

The package has had only two releases, both in October 2018, with no release in nearly eight years. That is strong evidence of abandonment for a dependency receiving ongoing use.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance.

Maintainerscaution

A single registry maintainer is a thin publishing base, and the repository activity provides no compensating evidence of active stewardship.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a modest transparency and maintenance gap for a package that has otherwise been inactive for years.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a supporting concern rather than the main adoption risk.