schematicon/collection-generator

Release historydanger

This is the package's only release, published about seven years and eleven months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, despite the release and repository being years old. This materially increases abandonment risk.

Package file treecaution

The artifact and repository contain a small, coherent five-file tree with the package manifest, source file, README, and license. This is transparent, though it offers little evidence of broader project maturity.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a real transparency gap for a package used as a dependency.