neighborhoods/buphalo

Release historydanger

The package has had no releases in the last 12 months, and its latest release was published nearly four years ago. Its earlier 27-release history shows prior activity but does not offset the current inactivity.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for nearly four years. The unarchived status does not show current maintenance.

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary. That mismatch creates licensing ambiguity despite the presence of a recognized license.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more for a package with no recent visible maintenance.