inani/chibi

Release historydanger

The package has made no releases in the last 12 months, and its latest registry release was in April 2019. This is strong evidence of abandonment risk despite the linked repository having a recent push.

Repo bus factorcaution

All recent commits came from one contributor, giving the project a single-person maintenance dependency. The repository owner is an individual rather than an organization, so there is no provided backing signal to offset that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating very limited recent maintenance activity even though the repository was updated recently.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a maintenance and transparency gap, though it is less significant than the release inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.