g-baranov/sxgeo

Project backingcaution

The repository is owned by an individual account rather than an organization, so the project has a relatively thin backing structure; this matters more alongside its inactive recent history.

Release historycaution

The package has 8 releases since April 2017, but none in the last 12 months; the latest release was about two years ago. This indicates materially slowed maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the roughly two-year release gap and raising abandonment risk.

Repo toolingcaution

Composer is used for the build and packaging workflow, but no security scanning tools are present. That is a modest transparency and maintenance gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.