weew/console-app

Release historydanger

The package has 16 releases but none in the last 12 months, and its latest release was in July 2016. This long period without releases is strong evidence of abandonment for a dependency.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest transparency gap, not a severe risk on its own.

Repository archivedcaution

The linked repository is not archived, which avoids a severe repository-status concern, but its last push was also in July 2016 and does not offset the stale release history.

Security policycaution

The repository has no security policy. This limits vulnerability-reporting transparency, though it is secondary to the much stronger maintenance concern.