verdient/token

Release historydanger

The latest release was about five years ago, with no releases in the past 12 months and only three releases overall. This is strong evidence of inactivity, though the repository is not archived and the package is small.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the past three months, consistent with the long release gap. This raises abandonment risk even though the project remains available.

Maintainerscaution

Only one registry publishing account is listed, and project_backing identifies the owner as an individual rather than an organization. That leaves limited visible publishing redundancy.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is not required for a healthy small package, but these counters provide little supporting evidence of active community oversight.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a token-handling library, that is a meaningful transparency and maintenance gap.