faslatam/alpine-js

Release historydanger

Only two releases exist, with the latest about 18 months ago and none in the past 12 months. This indicates a largely inactive release process, though it does not by itself prove abandonment.

Maintainerscaution

One registry maintainer is responsible for publishing the package. This is a limited publishing base, although the repository owner is also identified and the count alone does not measure actual maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the past three months. That weakens evidence of ongoing maintenance, despite a more recent repository push being recorded.

Repo toolingcaution

The repository uses Composer build tooling, which supports a defined build process, but no security-scanning tools were detected. The missing scanner is a hygiene concern rather than evidence of unsafe code.

Security policycaution

The linked repository has no security policy. This is a modest transparency gap for a dependency, but the available signals do not show a broader security-process failure.