kjbstar/recalboy

Release historydanger

The latest release was in September 2017, about 9 years before collection, with no releases in the last 12 months. This strongly indicates abandonment despite the package having six historical releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and materially increasing maintenance risk.

Lifecycle scriptscaution

Install-time post-install scripts run during installation, adding operational and reproducibility risk compared with a package without lifecycle hooks.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This weakens ongoing supply-chain hygiene, though it is less significant than the maintenance gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented; this is a secondary transparency gap for an otherwise clearly identified package.