ngthuc/ci-composer

Release historycaution

The latest release was in July 2020, with no releases in the last 12 months despite the package being over six years old. This is strong evidence of abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of an active user or contributor base. Low popularity alone is not decisive, but it reinforces the maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are present. That weakens maintenance and vulnerability-detection evidence, although it is not a severe risk by itself.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap for a package intended for web applications.