quantaforge/config

Release historydanger

This is the package's only release, published about 35 months ago, with no releases in the last 12 months. That strongly suggests abandonment risk for a dependency.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the release history's long period of inactivity.

Licensecaution

The artifact includes an MIT license file, so it is licensed; however, the manifest declares it as proprietary, creating a material licensing inconsistency.

Package scaffoldingcaution

The artifact has no README, while the absence of tests and a changelog is normal packaging practice. Missing consumer documentation is a real transparency gap for a library package.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. This leaves dependency and release hygiene less visible.