teraone/memcache-sasl

Release historydanger

This is the only release, published about 9 years and 9 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the stable 1.0.0 version.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and leaving current maintenance capacity un demonstrated.

Licensecaution

The artifact contains a LICENSE file and the repository also has one, so licensing is transparent. However, the manifest declares MIT while the detected license is BSD-3-Clause, creating a meaningful terms mismatch.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. Although name differences can occur in subpackages, both indicators together make package ownership less transparent.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than a severe risk on its own.