pozoltd/darthvader

Release historydanger

The package is two years old but has only three releases, all clustered within about 12 hours, with no releases in the last 12 months. That provides little evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being about two years ago. This is strong abandonment evidence.

Dependency profilecaution

The package declares seven runtime dependencies, including payment, spreadsheet, and geolocation libraries. That breadth increases maintenance and compatibility demands for an inactive package.

Licensecaution

The manifest declares a proprietary license, while the repository license file is recognized as BSD-3-Clause. The release is not clearly aligned on licensing, creating a real adoption concern.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, though it is less serious than the package's prolonged inactivity.