valorin/vest

Release historydanger

The package has had only 3 releases, with the latest on October 18, 2014 and none in the past 12 months. That long release gap is strong evidence of abandonment risk.

Repo commit activitydanger

The repository has recorded 0 commits and 0 active maintainers in the past 3 months, with the last push in February 2015. This confirms that maintenance has been inactive for more than 11 years.

Dependency profilecaution

The manifest declares 10 runtime dependencies and no development dependencies, including testing, linting, static-analysis, and security-checking tools. Treating these tools as runtime dependencies increases complexity and may reflect outdated packaging.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected in the repository. That leaves release and dependency hygiene less clearly maintained.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though it is less significant than the long-standing lack of maintenance.