gioco-plus/wmlive-contract

Release historydanger

The package has had only two releases, both in August 2022, and none in roughly four years. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.

Maintainerscaution

Only one registry publishing maintainer is listed. Organization backing provides some context, but the observed publishing base remains thin and creates continuity risk.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package name. That leaves a modest concern about package-to-repository linkage.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling is present. For this small interface package that is a modest transparency gap, not a standalone severe risk.