fisk/steam-inventory

Release historycaution

The package has seven releases since 2017, but none in the last five years and its latest release was in June 2021. That long publishing gap is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having stopped evolving. This raises abandonment risk despite the repository remaining available.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest transparency gap, not a standalone reason to reject this small, inactive library.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a hygiene concern, especially for a library that communicates with an external API.