tomaskarlik/conventions

Release historydanger

This is the package's only release, published about 8 years ago, with no releases in the last 12 months. That is strong evidence of stagnation for a dependency, despite the stable version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last 3 months. Combined with the single-release history, this points to substantial abandonment risk.

Maintainerscaution

One registry maintainer is consistent with a small individual project, but it leaves little visible publishing capacity when combined with the package's long inactivity.

Repo popularitycaution

The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these figures provide no additional community or maintenance signal.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling is present. This is a modest hygiene gap rather than evidence of unsafe behavior.