sourceability/portal

Release historydanger

The package has only one release, first and latest published on April 7, 2023, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. The organization backing does not compensate for absent observed maintenance.

Dependency profilecaution

The package declares 10 runtime dependencies, including HTTP, cache, console, and OpenAI client components. This is a meaningful dependency surface for a small experimental package, though it is not excessive enough to indicate severe risk on its own.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected. The build tooling is a positive, while the absent scanning is a modest transparency gap.

Security policycaution

The repository has no security policy. This limits the project's documented process for handling vulnerabilities, although it is less decisive than the prolonged lack of maintenance.