jeroen/query-engine

Release historydanger

The package has five releases, but none in the last 12 months and the latest release was more than 10 years ago. This is strong evidence that maintenance has stopped, despite a reasonable earlier release cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Together with the old latest release, this indicates a sustained lack of maintenance rather than a short quiet period.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a modest transparency gap, secondary to the much larger maintenance concern.

Repository archivedcaution

The linked repository is not marked archived, which avoids the strongest abandonment signal, but its last push was more than 10 years ago and does not offset the absence of recent development.

Security policycaution

The repository has no published security policy. For a library that may process stored data, this weakens vulnerability-reporting transparency, although it is less serious than the demonstrated long-term inactivity.