hermes/dependencies

Maintainerscaution

Only one registry publishing maintainer is listed, leaving limited visible publishing redundancy. The repository's release activity provides some compensation, but the base remains thin.

Release historycaution

The package has had no releases in the last 12 months, and its five releases since 2021 are widely spaced. The latest release is still documented, but the recent inactivity lowers maintenance confidence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this indicates currently inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small CLI this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no published security policy. This reduces transparency about vulnerability reporting, though it is not by itself evidence of unsafe code.