trusfin/aws-cognito

Release historydanger

The package has made 17 releases, but none in the last 12 months; its latest release was over four years ago. This extended release gap materially raises abandonment and compatibility risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the old last push, this is strong evidence that maintenance has stalled.

Project backingcaution

The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but no evidence of organizational backing or broader maintenance capacity.

Repository archivedcaution

The linked repository is not archived, but it was last pushed over three years ago, so its unarchived status does not compensate for the observed inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for an authentication package. This is a transparency gap that matters to consumers.