msyk/dropbox-api-shortlivedtoken

Release historydanger

The package has five releases but none in the last 12 months, and its latest release was about four years ago. This strongly lowers confidence in ongoing maintenance.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the roughly four-year-old latest push and indicating abandonment risk.

Maintainerscaution

A single registry maintainer is reasonable for a small personal project, but it provides little redundancy when the release and repository activity have already stopped.

Repo toolingcaution

Composer is used for the build, which fits the PHP package, but no security scanning tooling is present. The missing scanning is a modest hygiene concern rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is less significant than the prolonged inactivity for this small sample package.