khokonc/chandra

Release historydanger

The latest release was over three years ago, with no releases in the last 12 months. The package has seven releases and a stable latest version, but the prolonged release gap raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap. This is strong evidence that maintenance has stalled.

Maintainerscaution

Only one registry maintainer is listed, leaving limited visible publishing capacity. The linked repository is also user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance team.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security-scanning tools were detected. That leaves a meaningful transparency and maintenance-control gap.

Security policycaution

The repository has no security policy. For a PHP framework handling application and database concerns, the absence of a reporting path is a real transparency gap.