gioco-plus/cmd-contract

Package scaffoldingcaution

The artifact includes a README, and the absence of tests or a changelog is expected for a published package artifact; the very short README offers little consumer guidance.

Release historycaution

The package is 215 days old with only two releases and a median interval of about 21 days, providing limited evidence of long-term maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, a meaningful sign of currently limited maintenance activity.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which limits guidance for reporting and handling vulnerabilities in a package intended for dependency use.