onramplab/convoso

Release historydanger

The package has had only two releases, both in June 2022, and none in the past four years. This is substantial evidence of abandonment risk for a dependency.

Licensecaution

Neither the package nor the linked repository declares or contains a recognised license file. That creates a material transparency and adoption concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release pause. The repository is not archived, but there is no observed recent maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository is the package's source.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest hygiene gap rather than a standalone reason to reject the package.