robsantossilva/blog

Release historydanger

This is the only release, published about four years and eight months ago, with no releases in the last 12 months. That strongly suggests abandonment risk for a dependency.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no recent maintenance.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so the source-package relationship is not clearly documented.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That leaves a modest maintenance and assurance gap.

Security policycaution

No repository security policy was found. This reduces transparency for reporting vulnerabilities, although it is not by itself evidence that the package is unsafe.