vecode/caldera-events

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the single-release history, this indicates a substantial maintenance and abandonment risk.

Release historycaution

This package has only one release, published over three years ago, with no releases in the last 12 months. That is meaningful evidence of limited ongoing maintenance for a dependency.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool is configured. That weakens verification of ongoing dependency and build hygiene, though it is not evidence of a security incident.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package intended to be consumed as a library.