vm/1st-hexlet-project

Maintainerscaution

A single registry maintainer is consistent with a small user-owned project, but it provides limited visible publishing redundancy when combined with the lack of recent activity.

Release historycaution

The package has made no releases in over 6 years, despite eight releases during its initial development; this is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and indicating likely abandonment.

Repo popularitycaution

The repository has 1 star and no forks, offering little evidence of a broad support or review community; this is supporting caution rather than a decisive risk.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tooling is present. That is a modest transparency and hygiene gap, not evidence that the package is unsafe.