natsumeaurlia/auto-property-reflection

Release historydanger

The package has had no release in about 4 years and 8 months, with only three releases overall and none in the last 12 months. This is a substantial maintenance concern for a dependency, although the small scope may reduce change pressure.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a repository that has been inactive since May 2022. The package may be stable, but future fixes are uncertain.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this offers little evidence of external review or adoption.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present. For this small package that is a modest transparency and assurance gap.

Security policycaution

The repository has no security policy. This does not make the package unsafe by itself, but it provides no documented process for reporting or handling vulnerabilities.