test789434/golden-goose

Release historydanger

The package has only two releases, both in 2021, with no release in roughly five years. That sharply raises abandonment risk despite the initially rapid two-day release interval.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being roughly five years ago.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of an active user or contributor community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency gap, outweighed by the much stronger evidence of prolonged inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds a transparency concern to the maintenance risk.