vipa/endorsement-bundle

Release historydanger

Only two releases were published, both in April 2017, with no releases in the last 12 months; this is strong evidence of an effectively abandoned release line.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and leaving maintenance effectively unproven.

Package scaffoldingcaution

The package has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a real integration and transparency gap for this framework bundle.

Security policycaution

The linked repository has no security policy, reducing transparency about how dependency and vulnerability reports are handled; the long inactivity makes this gap more significant.