frdl/codebase-vendors

Dependency profilecaution

The package declares 85 runtime dependencies and no development dependencies, creating a broad maintenance and compatibility surface for a small vendor-package bundle.

Release historycaution

The latest release was in June 2023, with no releases in the last 12 months despite the package being more than three years old. This is a substantial maintenance and abandonment concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with slowing maintenance and increasing abandonment risk.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning coverage is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, leaving the process for reporting and handling vulnerabilities undocumented.