kucha/ueditor

Release historydanger

The package has had no release in nearly eight years: its latest release was November 2018, despite eight total releases. This strongly raises abandonment risk, although the repository is not archived.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal shows current maintenance activity to compensate.

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base for a package with no recent release activity, though it does not by itself prove the source project lacks all support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This is a maintenance and transparency gap, not evidence that the package is unsafe by itself.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in an editor and upload integration.