kongflower/tools

Release historydanger

The latest release was over six years ago, with no releases in the last 12 months. Six releases arrived close together in early 2020, but that short burst does not offset the prolonged silence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's extended inactivity.

Maintainerscaution

One registry maintainer leaves the package dependent on a single publisher. The linked repository is also owned by an individual, so no organizational backing is shown to compensate.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. That weakens supply-chain hygiene without proving a release is unsafe.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much stronger abandonment evidence.