pandcar/atomic

Licensedanger

The manifest declares a proprietary license, with no recognized license text and no license file in either the package or repository. That creates a serious reuse and transparency concern for an open-source dependency.

Release historydanger

The latest release was published on February 21, 2018, with no releases in the last 12 months; this long period without updates is strong abandonment evidence.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates since 2018.

Package file treecaution

The package and repository each contain only six files, including one source file; this may fit a small library but provides little visible project depth or maintenance evidence.

Repo toolingcaution

Composer is used as the build tool, but the repository has no security scanning tools. This is a hygiene gap that adds concern alongside the otherwise inactive project.