filipsedivy/cnb-api

Release historycaution

The package has six releases since 2017, but its latest release was published over three years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern, though the stable major version reduces release-churn risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap. The repository is still available and unarchived, but there is no recent evidence of active maintenance.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool was detected. The missing scanning is a transparency gap, although the lack of recent workflow activity limits the practical significance of this finding.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a hygiene concern rather than evidence that the package is unsafe.