mrself/data-transformers

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no demonstrated organizational backing to offset the thin maintenance activity.

Release historycaution

The latest release was nearly six years ago, with 0 releases in the last 12 months; only 4 releases exist overall. This materially raises abandonment risk despite the package's established age.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last three months. This is a meaningful maintenance warning, although the repository's January 2026 push shows it is not clearly abandoned.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest hygiene concern rather than evidence that the package is unfit to use.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This lowers transparency but is not severe on its own.