lazyuu/hweather

Release historydanger

The package has only one release, published six years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although the repository is not archived.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the six-year release gap and indicating no current maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. The absence limits assurance about dependency and source hygiene.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a meaningful but secondary concern beside the maintenance gap.