jsl/ensure

Release historydanger

The latest release was in December 2022, with no releases in the last 12 months despite the package being nearly four years old. The early burst of seven releases shows initial activity but does not offset the long period without updates.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, consistent with the extended release pause. This is strong evidence of abandonment risk.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of an active user or contributor community to support maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The build setup is appropriate for the package, while the missing scanning is a modest hygiene gap.

Security policycaution

The repository has no security policy, leaving no published process for reporting or handling vulnerabilities. This is a transparency gap, though it is less serious than the lack of maintenance activity.