vincentzzh33/gulp

Release historydanger

The package has only one release, published over eight years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency.

Repo popularitycaution

The repository has one star, no forks, and no watchers, indicating very limited visible adoption. Popularity is supporting evidence, but this adds to the maintenance concern.

Repo toolingcaution

The repository uses Composer for builds but reports no security scanning tools. The missing scanning is a minor hygiene gap, not a severe dependency risk on its own.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is less serious than the package's stale release history.