olajoscs/nestable-generator

Release historydanger

The package has had only three releases, all clustered in September 2017, with no release in nearly nine years. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded no commits or active maintainers in the last three months, and its last push was in July 2019. The long-standing lack of activity materially lowers confidence in ongoing maintenance.

Maintainerscaution

One individual account has registry publishing access, and the project is user-owned rather than organization-backed. This is a thin maintenance base, especially alongside the stale release and repository activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance-process gap, not a severe risk on its own.

Security policycaution

The repository has no security policy. For a small PHP library this is a hygiene gap, though it is less significant than the evidence of prolonged inactivity.