pendenga/file

Release historydanger

This package has had only one release, with no releases in roughly six years. That makes ongoing compatibility and maintenance uncertain despite the repository remaining available.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the six-year release gap, this is strong evidence of limited current maintenance.

Licensecaution

The manifest declares no license and no license file was found in the package or repository. This creates a real adoption and reuse concern.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. This is a transparency gap, though it is less severe because the repository has no workflows or install scripts.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.