iak/regexbuilder

Release historydanger

The package has only one release, published about 9 years ago, and none in the last 12 months. This is strong evidence of an unmaintained dependency, despite the package remaining stable and non-deprecated.

Repo commit activitydanger

The repository has had no commits and no active maintainers in the last 3 months, consistent with the last push being about 9 years ago. The lack of recent development materially increases abandonment risk.

Maintainerscaution

One registry maintainer creates a thin ownership base. That is not inherently unhealthy for a small library, but it leaves limited demonstrated capacity to respond after the long period without releases.

Repo toolingcaution

Composer is used for project tooling, but no security scanning tool was detected. This is a modest transparency and hygiene gap, not a standalone adoption blocker.

Security policycaution

The repository has no security policy. For a small library this is a limited gap, but it reduces clarity about how vulnerabilities would be reported during future maintenance.