gisostallenberg/correct-horse-battery-staple-api

Release historydanger

This is the package's only release, published in December 2015, with no releases in the last 12 months. That long absence of new versions is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no maintenance for years.

Dependency profilecaution

The package has three runtime dependencies and no development dependencies. This is a manageable dependency surface, though the absence of development dependencies also provides little evidence of a maintained test or development setup.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. This is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy or documented security-reporting path. For a password-strength service, this is a meaningful transparency gap, though it is secondary to the prolonged inactivity.