tulparstudyo/kargo

Release historydanger

This is the package's only release, published over five years ago, with no releases in the last 12 months. That leaves no evidence of ongoing maintenance or compatibility work.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package having been inactive since its initial release.

Package scaffoldingcaution

The package includes a README, but it is only 8 characters long and the artifact has no tests or changelog. Missing tests and changelog are normal for published artifacts; the extremely limited README still reduces integration confidence.

Repo toolingcaution

Composer is used as the build tool, which is appropriate, but no security-scanning tooling is present. This is a modest supply-chain hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious for this small package than the lack of maintenance.