labcoding/feedback

Release historydanger

The package has had no releases in the last 12 months, and its latest release was published about nine years ago. Five releases show an established history, but the long period without updates is a substantial abandonment concern.

Licensecaution

The artifact contains a license file and declares BSD-3-Clause, so the release is licensed. However, the detected MIT text does not match the declaration, creating a transparency and licensing caution.

Maintainerscaution

Only one registry account has publish access, leaving little observable publishing redundancy. The linked project is also owned by an individual, so there is no organizational backing shown to compensate for that thin maintainer base.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no supporting evidence of an active user or contributor community. Low popularity alone is not decisive, but it reinforces the maintenance concern here.

Repo toolingcaution

Composer is used as the build tool, showing basic project tooling, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.