janus-ssp/client

Release historydanger

The latest release was in September 2016, with no releases in the last 12 months; nearly 10 years without a release is strong evidence of abandonment risk.

Dependency profilecaution

The package declares five runtime dependencies and no development dependencies; this is a manageable dependency surface, though the lack of development dependencies also gives little evidence of maintained project tooling.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present; for an API client, this is a meaningful but not decisive transparency and maintenance gap.

Repository archivedcaution

The repository is not archived, which is a modest compensating signal, but it has not been pushed since September 2016 and therefore does not demonstrate active maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This adds a hygiene concern to the broader evidence of inactivity.