suframe/tools

Release historydanger

The package has had no releases in nearly six years, despite only five releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of ongoing maintenance.

Package scaffoldingcaution

The artifact has only an eight-character README and no tests or changelog. Missing tests and changelog files are normal in published artifacts, but the extremely minimal README weakens consumer transparency.

Repo toolingcaution

The repository uses Composer, but no security-scanning tooling is present. This is a modest maintenance-hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in an already inactive project.