quietfrog/dependency-graph

Project backingcaution

The repository is owned by an individual rather than an organization, and no organizational backing is shown. That leaves a thinner apparent support structure, although registry maintainer access alone is not used as evidence of activity.

Release historycaution

The package was first released in August 2014, with its latest release in October 2014 and no releases in the last 12 months. This long release gap is a meaningful maintenance concern, though the package is not deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this indicates an effectively inactive project and raises abandonment risk.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools are detected. This is a transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Repository archivedcaution

The linked repository is not marked archived, so it remains technically available. Its last push in October 2014 nevertheless aligns with the inactivity shown by release and commit signals.