faparicior/far-symfony2-jquery-upload

Release historydanger

Only two releases were published, with the latest in February 2016 and none in more than 10 years. This is strong evidence of abandonment for a framework integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Dependency profilecaution

The package declares 15 runtime dependencies, including a broad Symfony2-era application stack. This increases compatibility and maintenance risk when the package itself is no longer actively updated.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security scanning tools are present. That is a modest supply-chain hygiene gap in an otherwise very old project.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The lack of policy is a transparency gap, though it is less serious than the maintenance failure.