huanyuwong/handscubeframework

Release historydanger

The package has had only two releases, with the latest published in December 2018 and no releases in the last 12 months. This is strong evidence of abandonment for a framework dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and leaving no visible maintenance capacity.

Package scaffoldingcaution

The artifact includes a README, but it is only 21 characters and provides no meaningful consumer guidance. The absence of tests and a changelog is normal for published package contents and is not itself a gap.

Repo toolingcaution

Composer is used for the build, which is appropriate for a Packagist package, but no security scanning tools were detected. That weakens maintenance transparency for a framework with several runtime dependencies.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is secondary to the prolonged inactivity.