gdbots/enrichments-bundle

Registry deprecationdanger

Packagist marks the entire package as abandoned and identifies gdbots/enrichments as its replacement. This is a severe adoption risk even though the release itself is not separately withdrawn.

Release historydanger

The package has only three releases, with the latest published in December 2017 and none in the last 12 months. This indicates prolonged abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long period without releases.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. That weakens confidence that the repository is the authoritative source, although the package's files are otherwise present there.

Security policycaution

The linked repository has no security policy. This is a transparency gap, particularly for a dependency that has had no recent maintenance activity.