overblog/wsclient-bundle

Release historydanger

The latest release was published in February 2016, with no releases in roughly 10 years. That strongly raises abandonment and compatibility risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last 3 months. Although the repository was pushed in 2022, there is no evidence of current maintenance.

Name lookalikecaution

The package borrows the identity of the much more established overblog/graphql-bundle, but artifact overlap is only 0.045, so this is not evidence that it is a copy. The resemblance can still confuse consumers about which package they intended to adopt.

Repo popularitycaution

The repository has 1 star, 0 forks, and 24 watchers, indicating a very small user and contributor base. Popularity is supporting evidence rather than decisive, but it offers little compensation for the stale release history.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the package's long release and maintenance hiatus.