kody/common

Release historydanger

The package has had no release in over two years: its latest release was February 20, 2024, despite being about 945 days old at collection. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in over two years. This materially increases abandonment risk.

Lifecycle scriptscaution

The package defines a post-install command, adding installation-time behavior that consumers should understand. The signal provides no evidence that the command is harmful, so this is a limited transparency concern.

Project backingcaution

The registry namespace is kody, while the linked repository is owned by an individual user rather than an organization. This offers little visible organizational backing for a package already showing stale activity.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. Build tooling is present, while the missing security automation is a modest maintenance gap.