saucebase/demo

Registry deprecationdanger

Packagist marks the entire package abandoned, with no replacement named. This is a substantial adoption and continuity risk despite other signs of recent activity.

Licensecaution

The artifact contains an MIT license file, so the release is licensed. The manifest says proprietary while the detected license is MIT, creating a material declaration mismatch.

Repo bus factorcaution

One contributor made all commits in the last 3 months. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits occurred in the last 3 months. The repository is active, but the low volume provides limited evidence of sustained maintenance capacity.

Repo toolingcaution

Composer and Task are used for project tooling, but no security scanning tool was detected. The missing scanning is a modest transparency and maintenance weakness.