sasedev/extra-tools-bundle

Release historydanger

The package has had only three releases, with none in about 8 years and 9 months; this is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last three months; together with the old last release, this indicates sustained inactivity.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor base.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. That is a maintenance and transparency gap, though it is less serious than the long inactivity.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities.