indieweb/mention-client

Release historycaution

The package has 21 releases since June 2013, but its latest registry release was in February 2021 and there were no releases in the last 12 months. This materially raises maintenance and abandonment risk.

Repo commit activitycaution

There were no commits and no active maintainers in the preceding three months. Combined with no registry releases in the preceding year, this indicates currently limited visible maintenance.

Repo toolingcaution

The repository uses Composer, which fits the package ecosystem, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

The linked repository has no published security policy. That makes vulnerability reporting and response expectations less transparent for a library handling network requests.