silksh/security-bundle

Release historydanger

The latest release was published in February 2020, and there have been no releases in the last 12 months. This long period without updates is a substantial maintenance concern.

Repo commit activitydanger

The repository had no commits and no active maintainers during the last three months, consistent with a project that has been inactive for years. Organization ownership provides backing context but no observed recent activity.

Licensecaution

The package declares a proprietary license but has no recognized license text or license file in the package or repository. That leaves reuse and redistribution terms unclear for an open-source dependency.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. This is a hygiene gap that adds some transparency and maintenance concern without proving the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and maintainer response procedures undocumented.