iamgold/postal

Release historydanger

The package has only one release, published about 3 years and 8 months ago, with no releases in the last 12 months. This is strong evidence of limited ongoing maintenance for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's single-release history. The repository is not archived, which prevents this from being a critical abandonment signal but does not offset the inactivity.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 0 watchers, providing no supporting evidence of community adoption or review. Popularity is not decisive for a small library, so this is a caution rather than a severe risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning reduces maintenance transparency, though it is less serious for this very small nine-file package.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, although the package's small scope limits its weight.