oojs/ui

Registry deprecationdanger

The package is explicitly marked abandoned at the package level, with oojs/oojs-ui listed as its replacement. This is a severe adoption risk even though the linked project remains active.

Repo toolingcaution

Composer build tooling is present, showing a defined build process, but no security scanning tools were detected. The missing scanning is a transparency gap, though it is secondary to the package's abandoned status.

Security policycaution

No repository security policy was found. This reduces vulnerability-reporting transparency, although the organization backing and active contributors provide some compensating evidence.