thefunpower/core

Dependency profilecaution

Fourteen runtime dependencies create a relatively broad maintenance and transitive-risk surface for a core package, although the dependencies are explicitly declared.

Release historycaution

The package has 77 releases over about 3 years, but none in the last 12 months; its latest release was over a year ago, which raises maintenance and abandonment concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with the long release pause and leaving current maintenance capacity uncertain.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is configured, leaving an avoidable transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.