steverobbins/stackformation

Release historydanger

The latest registry release was published in April 2017, and there have been no releases in the last 12 months. A package this old without a newer release carries substantial abandonment and compatibility risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This indicates little current maintenance capacity and reinforces the stale release history.

Repo toolingcaution

Composer and Box are used for the build, but no security-scanning tooling is present. This is a transparency and maintenance gap, though it is not by itself evidence that the release is unsafe.

Security policycaution

The repository has no security policy. That weakens disclosure and maintenance transparency, but it is a secondary concern compared with the package's long release gap.