fgsl/csvextractor

Release historydanger

This package has only one release, published nearly five years ago, with no releases in the last 12 months. That is strong evidence of limited maturity and possible abandonment.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, following a last push nearly five years ago. This materially increases the risk that defects and dependency changes will go unattended.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive proof, but these figures provide little evidence of community adoption or backup.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. That is a maintenance and transparency gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a genuine transparency gap for a package that writes data to database tables.