lackone/curl

Release historydanger

The package has made only one release, on April 25, 2018, with none in the last 12 months. This is strong evidence of abandonment risk for a dependency released over eight years ago.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases. The repository is not archived, but it shows no current maintenance activity.

Maintainerscaution

Only one registry maintainer is listed, leaving a thin publishing base and increasing continuity risk. The linked repository is also owned by the same individual, so no broader project backing compensates for this.

Package file treecaution

The artifact and repository each contain only four files, which may fit this small component but provides little visible project depth or maintenance evidence.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. This is a modest transparency and hygiene gap rather than evidence of an unsafe release.