rewake/sendlane

Release historydanger

The package has only two releases, both in June 2019, with no releases in the last 12 months. This indicates a long-standing lack of maintenance for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in July 2019. This materially raises abandonment risk.

Licensecaution

The artifact contains a GPL-3.0 license file, but the manifest declares the package proprietary. That unresolved mismatch creates legal and transparency uncertainty despite the presence of a license file.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The missing scanning is a modest hygiene concern rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is less serious than the clear maintenance concerns.