staspiv/review-bundle

Release historydanger

The latest release was in July 2016, with no releases in the last 12 months across a package that is over 10 years old. This is strong evidence of abandonment risk.

Licensecaution

The manifest declares a proprietary license and no license file was found in either the package or repository. That can restrict redistribution and adoption.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of active use or review.

Repo toolingcaution

Composer is used for builds, which supports reproducible project structure, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The package's code-review purpose makes this gap more relevant than it would be for a purely cosmetic utility.