iflamed/xmpush

Release historydanger

This package has only one release, published in December 2016, with no releases in the last 12 months. That long period without a newer release is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in December 2016. There is no observed recent maintenance capacity to compensate for the age of the release.

Maintainerscaution

Only one registry account has publish access. This limits publishing resilience, although the project is user-owned and the registry maintainer count alone does not prove abandonment.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanner is a modest supply-chain hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a package that sends push notifications and may handle service credentials, this reduces transparency about how vulnerabilities are reported.