szelepke/momentjs

Release historydanger

This package has only one release, published about 7 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no visible ongoing maintenance.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad user or maintainer community.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools are present. For this very small package that is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This is a hygiene gap that gives consumers no documented route for reporting vulnerabilities, though it is less significant for this small asset package.