hore/hore-package

Release historydanger

This is a 1,646-day-old package with only one release and no releases in the last 12 months, providing strong evidence of abandonment risk.

Licensecaution

The release includes a license file, but the manifest declares ISC while the artifact license is detected as MIT. The package is licensed, though the mismatch reduces transparency.

Package scaffoldingcaution

The package has no README, tests, or changelog. Missing tests and changelogs are normal for published artifacts, but the absent README makes integration and maintenance expectations less clear.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no provided evidence of broader project backing to offset the thin maintenance history.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.