qixinyun/pingxiang-anyuan-share-config

Release historydanger

The package has only one release, published about 6 years 8 months ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the old release history, this is strong evidence of stalled maintenance.

Repo package mentioncaution

The repository name matches the package name, supporting the link, but the README does not mention the package explicitly. That leaves a minor ownership and publication-transparency gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk on its own.

Security policycaution

The repository has no security policy. For a small configuration package this is a limited concern, but it reduces the project's reporting transparency.