webbundels/changelog

Release historycaution

The package has had no registry release in over two years, despite seven releases overall, which suggests slowing maintenance. Its repository was pushed more recently, partly offsetting the age of the latest release.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating limited recent development activity. This is concerning but not abandonment on its own because the repository is not archived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package that handles application authorization and database migrations, this leaves a meaningful maintenance gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.