setono/client-id-contracts

Release historydanger

Only two releases were published, with the latest about five years ago and none in the past 12 months. This suggests the package is effectively inactive, although a small stable utility may need few releases.

Repo commit activitycaution

There were no commits or active maintainers in the past three months, reinforcing the release-history evidence of a dormant project.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but this provides little external evidence of broad adoption or review.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool is configured. The missing scanner is a minor hygiene limitation for this small package.

Security policycaution

The repository has no security policy. For a small contracts library this is a modest transparency gap, not a standalone reason to reject it.