statikbe/craft-carbon-tracker

Release historydanger

The package has had no registry releases in roughly two years, despite ten releases earlier in its history. This strongly raises abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in September 2024. This is strong evidence that maintenance has stalled.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a meaningful, though not decisive, transparency gap.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities or explaining security handling.

Version stabilitycaution

The assessed version is 5.0.3, while the registry reports 4.1.2 as the latest version. That inconsistency makes the release identity and compatibility story less reliable.