rpk/acid-storage

Release historydanger

The latest release was published in November 2018, and there have been no releases in nearly eight years. This is strong evidence of abandonment risk for a storage library, despite the package having two historical releases.

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last three months, consistent with its last push in November 2018. The long inactivity materially lowers confidence that defects or compatibility issues will be addressed.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence of an active user or contributor community.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. For a small package this is a supporting hygiene gap rather than evidence of maliciousness, but it leaves less assurance around maintenance quality.

Security policycaution

The repository has no security policy. That is a transparency and vulnerability-reporting gap, especially for a package implementing persistent storage, although it is less significant than the prolonged inactivity.