linkorb/timeular-client

Release historydanger

This was the package's only release, published about eight years ago, with no releases in the last 12 months. That strongly raises abandonment and compatibility risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The lack of recent development materially lowers maintenance confidence.

Repo package mentioncaution

The linked repository name does not exactly match the package and its README does not mention the package name. Although a name mismatch can be normal for a subpackage, the absence of any README mention creates ownership and provenance uncertainty.

Repo toolingcaution

Composer is used as the build tool, which is appropriate for this PHP package, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no published security policy. For a library that handles API credentials, this reduces transparency around vulnerability reporting.