jeyroik/extas-protocol-form

Release historydanger

Only two releases were published, with no release in over six years. The long gap materially raises abandonment risk despite the package reaching a stable 1.0.0 release.

Repo commit activitydanger

There were no commits or active maintainers in the last three months, consistent with the repository's last push being over six years ago. This is the clearest evidence of inactive maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present. That is a minor transparency and hygiene gap, not a severe dependency risk by itself.

Security policycaution

The repository has no security policy. For a small protocol package this is a modest transparency gap, but it does not outweigh the maintenance evidence.