signpostmarv/daft-markup

Release historycaution

The package has 16 releases, but none in the last 12 months and its latest release was in September 2020. That long silence is a meaningful maintenance concern despite its earlier regular release interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the evidence of stalled maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That weakens evidence of ongoing security hygiene without outweighing the package's tests and licensing.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it does not by itself make the release unfit.