verdient/yun-express

Release historydanger

This package has only one release, published about two years and six months ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, after its only release. This is strong evidence of stalled maintenance.

Package scaffoldingcaution

The package contains no README, tests, or changelog. Missing tests and changelog are common in published artifacts, but the absent README is a real consumer-transparency gap for this library.

Repo toolingcaution

Composer build tooling is present, which supports reproducible package management, but no security-scanning tool was detected. Given the otherwise inactive project, this is a modest hygiene concern.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a maintenance and transparency gap, though not severe on its own.