legalthings/lto-api

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe adoption concern because future fixes and support are uncertain.

Release historydanger

The latest registry release was January 2021, with no releases in the last 12 months. Nearly six years without a release is strong evidence of abandonment for a client library.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This confirms that the long release gap reflects inactive development rather than a deliberately stable cadence.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is an additional transparency gap for a package that handles signing and account operations.

Workflow auditcaution

The single analyzed workflow is complete and has no dangerous triggers or audit findings, but both action references are unpinned. That weakens build reproducibility and is a modest supply-chain hygiene concern.