littler/annotation

Release historydanger

This package has only one release, published in August 2021, with no releases in the last five years. That is strong evidence of an immature or abandoned dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for years. This materially raises abandonment risk.

Dependency profilecaution

Five runtime dependencies create meaningful maintenance and compatibility exposure for a package that has had only one release. The signal does not show that these dependencies are unsafe, but the surface area increases adoption risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of community use or external oversight. Popularity is supporting evidence, so this reinforces rather than determines the risk assessment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a transparency and maintenance gap, though it is less severe than the absence of development activity.