simplon/collage

Release historydanger

The latest release was published over six years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite a previously regular release interval.

Repo package mentiondanger

The repository name does not match the package name and its README does not mention the package. That raises doubt about whether the linked repository is the package's actual source.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to offset the single-maintainer and stale-activity concerns.

Repo popularitycaution

The repository has zero stars and two forks, providing little supporting evidence of broad adoption. Popularity is only supporting evidence, so this does not independently determine the score.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. The absence of scanning is a transparency and hygiene gap rather than evidence of maliciousness.