oilstone/template-api

Release historydanger

The package has only two releases, with the latest published in September 2021 and none in the following five years. That is strong evidence of abandonment for a package intended as a framework dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push in September 2021. This materially raises abandonment risk.

Package scaffoldingcaution

The artifact includes a README, but it is only 12 characters long and says “# unrisd-api”; the repository also has no tests or changelog. The missing tests and changelog are normal packaging practice, but the extremely sparse README weakens consumer transparency.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tooling is configured. The missing scanner is a maintenance and supply-chain hygiene gap, though it is less serious than the lack of recent activity.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This reduces transparency for a package with no recent maintenance evidence.