neuronws/neuron-sync-heroku

Release historydanger

The last release was about 11 years ago, with only four releases and none in the last 12 months. This strongly indicates the package is abandoned, despite the repository not being archived.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 11-year release gap. The non-archived status does not show active maintenance.

Licensecaution

No declared license, license file, or repository license file was detected, so the release provides no clear permission for reuse. This is a material adoption and transparency concern.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security-scanning tooling is present. Given the project's long inactivity, this is a secondary hygiene concern.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This adds a transparency gap for a package that handles SSH-related configuration.