vela/icons-bundle

Release historycaution

This is the package's only release, published about 7 years ago, with no releases in the last 12 months. That long period without a new release is a substantial abandonment concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this indicates a project that is no longer actively maintained.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. For a dependency distributed through a package registry, that leaves a meaningful maintenance and transparency gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.