sbominator/cli

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the March 2025 last push, this is the strongest abandonment concern.

Dependency profilecaution

The release declares six runtime dependencies, including three packages in the same project namespace. This is a meaningful dependency surface for a small CLI, though the signal does not show excessive or suspicious breadth.

Release historycaution

The package is 573 days old but has only three releases, all clustered around March 2025, with no releases in the last 12 months. This indicates a young project whose maintenance has stopped rather than an established steady cadence.

Repo popularitycaution

The repository has one star, zero forks, and three watchers. Low adoption is not decisive for a niche CLI, but it provides little external evidence of maturity or broad review.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. That is a transparency and maintenance gap, although it is not evidence of malicious behavior.