uu/contract

Release historydanger

Only one release exists, published in June 2021, with no releases in the last 12 months; this is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no maintenance for over five years.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are reported; this is a minor transparency gap rather than a standalone severe risk.

Repository archivedcaution

The repository is not archived, which avoids an explicit abandonment signal, but it was last pushed in June 2021 and therefore does not offset the inactivity elsewhere.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented.