mmae/files

Release historydanger

The package has made no releases in the last four years, despite having five releases concentrated in September 2022. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Package scaffoldingcaution

A README is present and the exact version has a GitHub release, which helps basic transparency. The 70-character documentation is very limited, while absent tests and changelog files are normal for published package artifacts and are not treated as gaps here.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance weakness rather than a standalone severe risk.

Security policycaution

The linked repository has no security policy, so there is no documented path for reporting vulnerabilities or communicating security fixes.