vanssata/borica3dsdk

Release historydanger

This is the package's only release, published about 5 years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and increasing abandonment risk.

Package scaffoldingcaution

A README and GitHub release are present, but the README explicitly leaves installation documentation as TODO. Missing tests and changelog files are normal for a published artifact and are not treated as gaps.

Repo package mentioncaution

The repository name matches the package, so it appears purpose-linked, but the README does not mention the package name. That weakens repository-to-package transparency somewhat.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. The missing scanner is a hygiene weakness, not evidence that the release is unsafe by itself.