sonatype-nexus-community/bach

Release historydanger

Only three releases are recorded, with none in the last 12 months; the latest release was in May 2022. This indicates the package is no longer actively released and raises abandonment risk.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, and the last recorded push was in June 2023. This is the strongest evidence that ongoing maintenance has stalled.

Lifecycle scriptscaution

A post-create-project-cmd script runs during project creation, adding an install-time execution surface. The signal gives no evidence that the script is unsafe, so this is a limited hygiene concern rather than a severe risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while three issues and three pull requests remain open. This suggests limited recent project attention.

Repo toolingcaution

Composer and Box provide build tooling, but no security-scanning tools were detected. For a dependency vulnerability auditor, that missing security automation is a meaningful transparency and maintenance gap.