guzinski/cnab_yaml

Release historydanger

The package has 15 releases, but all were published around November 25, 2017, with no releases in the following 8 years and 10 months. This is strong evidence of abandonment unless the data is considered permanently complete.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the absence of releases since November 2017. The package may be stable static data, but there is no observed maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. For a static YAML package this is a modest transparency gap rather than a severe risk.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting and handling security issues.