fdevs/locale-bundle

Release historydanger

The last registry release was over 10 years ago, with no releases in the past 12 months. This is strong evidence of abandonment for a package expected to receive maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, following its last push in August 2016. This indicates no current maintenance capacity.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools are present. This is a modest transparency and maintenance weakness, though not evidence of a security incident by itself.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a modest transparency concern to the broader maintenance risk.

Version stabilitycaution

The assessed version is 3.0.0, while the observed latest version is 2.2.0. That inconsistency reduces confidence in the release metadata and makes the release history harder to verify.