sbominator/scaninator

Release historycaution

The package has had 5 releases, but none in the last 12 months, and its latest release was about 19 months ago. This is meaningful abandonment risk despite the initial burst of releases.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old last push, this is the strongest maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. That limits vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.

Version stabilitycaution

The latest release is v0.1.2 and is not a stable major version, so its API and behavior may still change. The presence of a normal, non-prerelease release provides some compensation.