krgupta/active

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no broader organizational backing shown to compensate for the single-maintainer structure.

Release historycaution

The package has seven releases, but none in the last 12 months and its latest release was nearly seven years ago. This materially lowers confidence that current framework compatibility is being maintained.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old registry release, this is the main maintenance concern, although the repository is not archived.

Repo popularitycaution

The repository has three stars and one fork, indicating a small user and contributor base. Low popularity is supporting caution rather than a verdict because the package is small and its structure is coherent.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This is a transparency gap, though it is partly offset by the package's small scope and absence of risky workflows.