pandora-una/pandora-valida-dependencia

Release historydanger

The package has had no registry release in about eight years, despite eight historical releases. This is strong evidence that maintenance has stopped and materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being about eight years ago. The long inactivity is a serious maintenance concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one issue still open. This adds evidence of an inactive project, although the package appears small.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools are configured. That is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters more because there is also no recent maintenance activity.