krak/string

Release historydanger

The package has only two releases, with the latest published in April 2016 and none in the past 12 months. This long release gap is a substantial maintenance concern.

Repo commit activitydanger

The repository had zero commits and zero active maintainers during the past three months, consistent with a project that has been inactive for years. This materially increases abandonment risk.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is present. For this small library that is a minor transparency and hygiene gap, not evidence of severe risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though the small scope and available tests partly limit the concern.

Version stabilitycaution

Version v0.2.0 is not a prerelease, which avoids an explicit prerelease warning, but it remains an early major-line release with limited release history.