navarr/mp3data

Release historydanger

The package has only one release, published 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, despite the package not being deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in 2015. This indicates maintenance has effectively stopped.

Repo toolingcaution

Composer is used for builds, showing basic project tooling. No security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This is a documentation gap that matters for a package consumers may still depend on, but it is less severe than the lack of maintenance activity.

Version stabilitycaution

Version 0.1 is not a stable major release, which adds some maturity uncertainty. The absence of prerelease labeling avoids making this a stronger concern.