frameduz-lib/bs-component

Release historydanger

This package has had only one release, published about eight years ago, with no releases in the last 12 months. That is strong evidence of stagnation for a dependency, even though the release is stable.

Maintainerscaution

One registry maintainer provides little visible publishing redundancy. The repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance base to compensate.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to offset the stale release history.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present. For this small package, the absence of scanning is a minor hygiene gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy. For a small package this is a modest transparency gap, but it leaves no documented channel or process for handling security reports.