qcm/core-bundle

Release historydanger

The latest release was in October 2016, with no releases in the last 12 months and a package age of about 11 years. This is strong evidence of abandonment for a framework bundle.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and leaving no evidence of current maintenance.

Project backingcaution

The linked repository is owned by an individual account rather than an organization, so the single registry maintainer does not have visible organizational backing to offset the maintenance gap.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source relationship is not clearly established.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency, although the larger maintenance concerns dominate the assessment.