vega6/syvid-sdk

Release historydanger

The package has had only two releases, with none in the last 12 months; its latest release was nearly eight years ago. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly eight-year-old release history and providing no evidence of current maintenance.

Licensecaution

No registry declaration, license file, or repository license file was detected. This creates a real adoption and redistribution concern.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling was detected. That weakens transparency around dependency and source risks.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The package's age and inactivity make this gap more consequential.