proklung/request-log-bundle

Release historydanger

This is the package's only release, published about five years ago, with no releases in the last 12 months. That provides strong evidence of abandonment risk, despite the stable 1.0.0 version.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the roughly five-year gap since the last release. This materially weakens confidence in ongoing maintenance.

Maintainerscaution

One registry maintainer creates a thin publishing base and increases continuity risk if that person stops maintaining the package. The linked repository is user-owned, so there is no organizational backing shown to offset this.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest repository hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less significant than the clear maintenance slowdown.