vardot/varbase-replaces

Release historycaution

The package has 14 releases overall but only 1 in the last 12 months, and its latest release was about 11 months before collection. This suggests slowing maintenance rather than abandonment by itself.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. For a two-file replacement-metadata package this may reflect low change frequency, but it still leaves little evidence of active upkeep.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk for this minimal package.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package has a very small artifact and no install-time scripts.