robuust/craft-youtube-code

Licensecaution

Neither the package nor its repository contains a license declaration or license file. This creates a real legal and transparency concern for dependency adoption.

Release historycaution

The package has only four releases across about 4 years and has had no release in the last 12 months; the latest release was over two years ago. This indicates materially slowed maintenance, with no provided evidence of recent activity to compensate.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Given that the latest push was over two years ago, this is a concrete abandonment risk.

Repo toolingcaution

The repository uses Composer, which is appropriate for this package, but has no security scanning tools. The missing scanning is a modest transparency gap rather than a severe risk for this small package.

Security policycaution

The repository has no security policy. This reduces vulnerability-reporting transparency, though the package is small and no other security-process evidence was provided.