frankerzeng/easy_ratelimiter

Release historydanger

This package has had only one release, published over seven years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency still being considered today.

Repo commit activitydanger

The repository recorded no commits and no active maintainers during the last three months, consistent with the release history showing no activity for over seven years.

Licensecaution

The artifact contains a license file, but it identifies Apache-2.0 while the manifest declares MIT. The release is licensed, yet the mismatch creates avoidable legal ambiguity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The absence of scanning weakens maintenance hygiene for a package with long-standing inactivity.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though not evidence of a vulnerability itself.