minerva-sistemas/minerva-signatures

Release historydanger

This is the package's only release, published in July 2016, with no releases in the last 12 months. That long gap creates a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the measured three-month period, consistent with the package having been inactive since July 2016.

Licensecaution

The artifact contains a license file and the repository also has one, but the manifest declares proprietary terms while the detected license is GPL-3.0. This mismatch requires legal clarification.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are reported. The missing scanning is a modest hygiene gap, not evidence of abandonment by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but the package's larger concern is its age and inactivity.