gioco-plus/xj-contract

Release historycaution

The package has only two releases, both from July 2024, with no release in roughly two years. That is a meaningful maintenance concern for a dependency, even though a small contract package may change infrequently.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. Combined with the old last push, this supports a concern about maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a tiny interface-only package this is a modest hygiene gap, not evidence of abandonment by itself.

Security policycaution

The repository has no security policy. This limits transparency for reporting issues, though the package's minimal interface surface makes the gap less significant than it would be for an application or security-sensitive library.