ljpc/jumboextras

Release historydanger

Only three releases exist, all clustered in February 2020, with no releases in more than six years. This is strong evidence of abandonment for a client library that may need to track a changing service.

Repo popularitycaution

The repository has 2 stars and 1 fork, providing little supporting evidence of broad community review or shared maintenance capacity. Low popularity alone is not decisive for a small package, but it compounds the lack of recent activity.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. The missing scanning is a modest quality-control gap rather than proof of unsafe code.

Repository archivedcaution

The repository is not marked archived, which avoids an explicit abandonment status, but its last push was in February 2020 and does not offset the stale release history.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it is less serious than the lack of recent maintenance.