tronapi/sdk

Release historydanger

The package has had no release in more than four years, with zero releases in the last 12 months. This is strong evidence of abandonment for a protocol-integration library.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with no release activity for more than four years. This materially raises abandonment risk.

Repo package mentiondanger

The linked repository name does not match the package and its README does not mention the package. A name mismatch can be normal for a sub-package, but without a README reference the repository’s ownership of this release is uncertain.

Dependency profilecaution

Eight runtime dependencies, including cryptography and blockchain clients, create meaningful dependency and compatibility maintenance needs. The dependency count is not excessive, but the package’s long inactivity makes those dependencies more concerning.

Repo toolingcaution

The repository uses Composer, showing basic build tooling, but no security scanning tools were detected. That is a modest hygiene gap rather than a severe risk.