rapnet/upload_lots

Release historydanger

This package has only one release, published about two and a half years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Package file treecaution

The artifact and repository each contain only six files, including two source files and no visible tests or development structure. This may reflect a small SDK, but it provides limited evidence of maturity.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so ownership of this published package is not clearly demonstrated. Organization backing provides some compensation but does not remove the transparency concern.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is not required for a healthy package, but these counters provide no supporting evidence of adoption or community review.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security-scanning tooling is configured. That is a transparency and maintenance gap rather than proof of a security problem.