ojs/import-bundle

Release historydanger

The latest release was in June 2016, with no releases in the last 12 months; this is a strong sign that the package is no longer actively maintained.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating substantial abandonment risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether the linked repository is the package's actual home.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities; this is a secondary concern beside the much older maintenance signals.