hypejunction/hypestash

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named; this is a substantial adoption and abandonment risk.

Release historydanger

The last registry release was in October 2018, nearly eight years ago, with no releases in the last 12 months. That strongly suggests the published release is stale.

Licensecaution

The manifest declares a proprietary license, while the repository contains a GPL-2.0 license file. The mismatch creates licensing uncertainty for adopters.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but all 11 action references are unpinned, leaving build inputs less reproducible and more exposed to upstream changes.