vecode/caldera-validation

Release historycaution

The latest release was in October 2023, with no releases in the last 12 months and only two releases overall. This is a meaningful maintenance concern for a dependency, though the package is not deprecated.

Repo commit activitycaution

The repository had no commits or active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little external evidence of maturity or active use.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The build setup is positive, while the missing scanning coverage modestly lowers confidence in maintenance hygiene.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.