tbela99/yaml

Release historydanger

The package has 450 releases since 2011, but its latest release was in June 2020 and it has had no releases for roughly six years. This strongly increases abandonment and compatibility risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity for roughly six years.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the available backing is narrow and does not offset the lack of recent activity.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The missing scanning process is a modest transparency and maintenance concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more because the project has shown no recent maintenance activity.