lsys/yaf

Release historydanger

There has been only one release, published in August 2020, with no releases in roughly six years. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. No provided signal shows compensating maintenance activity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional community-maintenance confidence.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are present. This is a modest supply-chain hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less severe than the prolonged inactivity.