smgladkovskiy/jelly

Release historydanger

The package has had only two releases, both in June 2016, with no releases in the last 10 years. This is strong evidence of abandonment for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since June 2016.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of an active user or contributor community. Popularity is supporting evidence, but it reinforces the maintenance concern here.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are present. That weakens ongoing maintenance hygiene without indicating a severe dependency risk by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though the package's long inactivity is the larger concern.