netsilik/sanitizer

Release historydanger

The latest release was on November 8, 2022, nearly 4 years ago, with no releases in the last 12 months. This is strong evidence of stagnation for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, matching the long release gap and providing no evidence of current maintenance.

Licensecaution

The package declares EUPL-1.2 and includes a license file, but the detected artifact license is EPL-1.0. The release is licensed, yet the mismatch creates a transparency and compliance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That weakens ongoing maintenance hygiene, especially alongside the absence of recent activity.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a maintenance-transparency gap, though it is not evidence of maliciousness.