openclerk/commodities

Release historydanger

This package has only one release, published about 9 years ago, with none in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

There were no commits or active maintainers in the last 3 months, consistent with the repository's last push about 9 years ago. This materially increases abandonment risk.

Licensecaution

No declared license or license file was found in the artifact or repository. This creates a real adoption and redistribution concern.

Repo popularitycaution

The repository has 0 stars and 1 fork, offering little community validation or evidence of sustained use. Popularity is supporting evidence, so this reinforces rather than determines the risk assessment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The tooling baseline is adequate, though security-maintenance evidence is limited.