vw/tools

Release historydanger

The package has only one release, published about five years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and raising abandonment risk.

Package scaffoldingcaution

The published library has no README, making integration and intended usage harder to verify. The absence of packaged tests and a changelog is normal for an artifact, while the repository's GitHub release usage provides some release-process evidence.

Repo package mentioncaution

The linked repository name does not match the package name, and no package mention was found in the repository README. This weakens confidence that the repository directly backs this package.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package structure, but no security-scanning tooling is present. This is a moderate supply-chain hygiene gap rather than evidence of malicious behavior.