psmb/mediaquery

Release historydanger

The last release was published in February 2017, and there have been no releases in over nine years. Only three releases exist overall, indicating substantial abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weak evidence of ongoing maintenance.

Licensecaution

The package declares LGPL-3.0+, but the artifact license file was detected as GPL-3.0. Although license files are present in both the artifact and repository, the mismatch needs clarification before adoption.

Package scaffoldingcaution

A README and a GitHub release for this version provide some transparency, but the README describes the package as WIP with only one helper. The absence of tests and a changelog is normal for published artifacts and is not penalized.

Repo toolingcaution

Composer is used for the build, which is appropriate for this package, but no security scanning tooling was detected. This is a hygiene gap rather than evidence of active supply-chain danger.