jejje/gravatar

Release historydanger

This package has only one release, published 11 years ago, with no releases in the last 12 months. That long period without updates is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package's long release gap and indicating no current maintenance.

Maintainerscaution

One registry maintainer is listed, and the repository is owned by an individual rather than an organization. This is not proof of a problem, but it provides a thin apparent support base alongside the lack of recent activity.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful community backing to offset the inactivity.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap for a package that may still be used in applications.