joinapi/data-accounting

Package scaffoldingcaution

The artifact includes a README, but it is only 17 characters long and contains just a heading, offering little integration guidance for a library with many model classes. Missing tests and a changelog in the package are normal packaging practice, and a GitHub release exists for this version.

Release historycaution

The package has had four releases since December 2024, but none in the last 12 months; the latest release was about 14 months ago. This indicates a stalled release cadence, although the package is not deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 14-month gap since the last release. No provided activity signal shows recent maintenance capacity.

Repo toolingcaution

Composer is used for the build, which is appropriate for a Packagist package, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving no documented route for reporting vulnerabilities. This matters for a data-accounting library but does not by itself show abandonment.