retentio/boomgo

Release historydanger

The package has only one release, first and latest published on January 1, 2012, with no releases in the last 12 months. This is strong evidence of long-term abandonment for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in May 2013. The long-standing lack of development materially raises maintenance and compatibility risk.

Repo toolingcaution

The project uses Composer, providing ordinary build and dependency tooling, but no security-scanning tools were detected. This is a modest hygiene gap rather than a severe risk on its own.

Repository archivedcaution

The repository is not formally archived, which avoids an explicit abandonment marker, but its last push was in May 2013 and the activity signal shows no recent work. The non-archived status does not compensate for the observed dormancy.

Security policycaution

The repository has no security policy. For an old database ODM with no recent maintenance, the lack of documented vulnerability-reporting guidance is a genuine transparency gap.