guave/installer-bundle

Release historydanger

This package has only one release, published in March 2020, with no releases in the last 12 months. That is a meaningful maintenance and compatibility concern.

Repo commit activitycaution

No commits or active maintainers were recorded in the three months before collection. This weakens the evidence of ongoing maintenance, even though the repository itself is not archived.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe concern.

Security policycaution

The repository has no published security policy. For a small package this is a hygiene gap, but it is not evidence that the release is unsafe by itself.