ghosty/bag

Release historycaution

The package has made no release in about two years, and there were no releases in the last 12 months. This is a meaningful maintenance concern despite 11 releases overall.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this indicates dormant development.

Repo toolingcaution

Composer is used for the build, providing relevant package tooling, but no security-scanning tools were detected. That weakens ongoing assurance without making the release unfit by itself.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response expectations.