softinvest/vto

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was roughly two years ago. That strongly limits evidence of ongoing maintenance.

Release historycaution

Only three releases were published, all within about two weeks, followed by roughly two years without a release. This shows a small and inactive release history, although the stable v1.0.2 version reduces pre-release risk.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected. For this small package that is a modest transparency gap rather than a severe risk.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This matters more because the project also shows no recent maintenance activity.