hanwenbo/ttlock

Release historydanger

The package has had no release in over 7 years: its latest release was November 2018, with zero releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. Its last push was in May 2023, so the package is not actively maintained despite not being archived.

Licensecaution

The manifest declares Apache-2.0, but the artifact license file was detected as MIT; although a license file exists, the mismatch creates legal and transparency uncertainty.

Repo toolingcaution

Composer is used for builds, which supports reproducible package management, but no security-scanning tool was detected. That is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy. For a package handling lock and authentication APIs, this weakens disclosure and maintenance transparency.