ride/lib-import

Release historydanger

The package has had no release in nearly 10 years: its latest release was October 13, 2016, and it had zero releases in the last 12 months. The 11-release history shows prior activity but does not offset the prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and indicating a strong abandonment risk.

Repo popularitycaution

The repository has zero stars and zero forks, with 9 watchers, providing little community evidence or backup maintenance capacity. Popularity is supporting evidence only, so this reinforces rather than determines the risk assessment.

Repo toolingcaution

Composer is used as the build tool, which supports reproducible package management, but no security-scanning tool is configured. That is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling security issues. This compounds the risk of relying on a project that has shown no recent maintenance.