laravolt/thunderclap

Release historydanger

The package has had no release in about six years; its latest release was February 21, 2020, despite 17 releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, indicating no current maintenance capacity. Together with the old latest release, this materially raises abandonment risk.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools are present. This is a transparency and maintenance-hygiene gap, not evidence that the package is unsafe by itself.

Repository archivedcaution

The linked repository is not archived, but its last push was on February 21, 2020, consistent with the release history's abandonment concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds a transparency gap alongside the lack of recent activity.