tochka-developers/jsonrpc-smd-converter

Release historydanger

The package has had no release in about eight years, with only four releases total and none in the past 12 months. This is strong evidence of abandonment risk, although the repository is not archived.

Repo commit activitydanger

There were no commits and no active maintainers in the past three months, consistent with the package's last release being about eight years ago. The organization-owned repository provides some backing but does not demonstrate current maintenance.

Repo popularitycaution

The repository has only 1 star, 1 fork, and 4 watchers, providing little independent evidence of broad adoption or community support. Low popularity is supporting evidence rather than a verdict by itself.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. For a dependency intended for application integration, that reduces transparency around ongoing security maintenance.

Security policycaution

The linked repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a hygiene and transparency gap, not evidence of a vulnerability.