sjs/hermod

Release historydanger

Only two releases were published, both in August 2024, with no releases in the past 12 months. This is a substantial abandonment concern for a package now about two years old.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and weakening confidence in ongoing maintenance.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these values provide little external evidence of review or adoption.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing security automation is a meaningful hygiene gap for a package handling logging credentials and network access.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response, although it is not by itself evidence that the package is unsafe.