ouropencode/dachi

Release historydanger

The package has 45 releases since 2016, but none in the last 12 months and its latest registry release was about three years ago. The historically frequent release interval does not compensate for the prolonged current inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months. Combined with the long gap since the last release, this is strong evidence of abandonment risk.

Dependency profilecaution

Fourteen runtime dependencies is a substantial dependency surface for a web framework, including database, templating, cloud, email, and development-related packages. This increases maintenance and transitive supply-chain exposure, with no compensating dev-dependency separation shown.

Repo toolingcaution

The repository has no build tooling and no security scanning tools. While the absence of build tooling may be acceptable for this PHP package, the lack of automated security checks is a genuine maintenance and transparency gap.

Repository archivedcaution

The linked repository is not archived, so it remains formally available for maintenance. Its last push was about three years ago, however, which is consistent with the inactivity shown by the release and commit signals.