itkg/combinedhttpcache

Release historydanger

The package has only two releases, with the latest published on August 15, 2016 and none in the last 12 months. This is strong evidence of abandonment for a dependency handling infrastructure concerns.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap. The repository is not archived, but that does not compensate for absent observed maintenance.

Repo issue activitycaution

One issue remains open, with no issues or pull requests opened or closed in the last month. This is supporting evidence of limited current activity rather than a severe risk by itself.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest supply-chain hygiene gap in an otherwise identifiable build setup.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself show that the package is unsafe.