netgen/metadata-bundle

Release historydanger

The package has had no release in more than four years, with zero releases in the last 12 months. This is strong evidence of a maintenance gap for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment concerns.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest hygiene concern.

Security policycaution

The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities. This is a maintainability and governance gap, though not an immediate dependency failure.