verdient/infrastructure

Release historydanger

This package has had only one release, published in March 2024, with no releases in the following roughly two and a half years. That is strong evidence of limited ongoing maintenance for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its only release. This materially increases abandonment risk.

Package scaffoldingcaution

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but a missing README is a real consumer-documentation gap for a library package.

Repo toolingcaution

Composer is used for the build, but the repository reports no security-scanning tooling. This is a modest transparency and maintenance-process gap, not evidence of a security defect.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations unspecified. This adds a small transparency concern alongside the weak maintenance evidence.