sunnysideup/dropdown2autocomplete

Release historycaution

The package has had no registry release in about three years, despite 14 releases since 2015; this raises maintenance and abandonment concerns, although the repository shows recent activity.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active person; the linked repository is user-owned, so no organizational handoff is evident.

Repo commit activitycaution

The repository recorded only two commits in the last three months, indicating limited recent activity; this partly offsets the older registry release history but does not remove the concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented process for reporting or handling vulnerabilities.