milsonuno/chat

Release historydanger

The package has one release, published about 9 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and materially increasing abandonment risk.

Licensecaution

The artifact includes a license file and the repository also has one, so licensing is not absent. However, the manifest declares CC(3.0) while the detected file is CC0-1.0, creating a transparency caution.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintainer base to compensate.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The build setup is present, while security-process evidence is limited.