vipa/import-bundle

Release historydanger

The package has had no release in about 9 years: its latest release was in April 2017, with zero releases in the past 12 months. This is strong evidence of abandonment for a migration tool that may need compatibility updates.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the package's long release hiatus. No provided activity signal shows current maintenance capacity.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. A name mismatch can be normal for a subpackage, but the absence of any README reference makes package ownership less transparent.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated oversight without showing a direct defect in the release.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is secondary to the much stronger evidence of inactivity.