idno/mentionjs

Release historydanger

This is the only release, published in November 2019, with no releases in the last 12 months. That long period without a new release is a substantial maintenance concern for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the absence of releases since November 2019. The repository is not archived, but there is no observed recent maintenance to compensate.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but this provides little external indication of active community oversight.

Repo toolingcaution

Composer is used as a build tool, which provides basic project structure, but no security scanning tooling is present. The missing scanning is a modest hygiene and maintenance concern.

Security policycaution

The repository has no security policy and no security scanning tools. For a browser-facing library this weakens vulnerability reporting and maintenance transparency, although it is not by itself evidence of unsafe code.