pablok/nvfc

Release historydanger

The latest registry release was over four years ago, with no releases in the last 12 months. This is meaningful evidence of stale maintenance for a package used to control current hardware and software.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last three months. Combined with the old registry release, this indicates weak evidence of ongoing maintenance.

Dependency profilecaution

The package declares nine runtime dependencies, including React and Symfony components. This is a moderate dependency surface for a small command-line tool and adds maintenance exposure, though the dependencies are explicit.

Project backingcaution

The repository is owned by an individual user rather than an organization. That is consistent with a small personal project but implies limited visible institutional backing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap, not evidence that the package is unsafe.