mohkoma/change-log

Release historydanger

The latest release was in December 2020, with no releases in the last 12 months and only three releases overall. This long period without a release is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no meaningful maintenance since December 2020.

Maintainerscaution

One registry maintainer publishes the package. Because the repository is user-owned rather than organization-backed, this leaves a thin maintenance base and a high bus-factor risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. This is a modest transparency and maintenance gap rather than a severe risk by itself.

Security policycaution

The linked repository has no security policy. This reduces transparency and gives consumers no documented process for reporting or handling vulnerabilities.