wikimedia/aho-corasick

Release historycaution

The package has only three releases since 2018, with no release in nearly three years and a median interval of about 2.8 years. This indicates slow maintenance, though a small stable library may not need frequent releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent repository push and stable scope provide some counterweight.

Repo toolingcaution

The repository uses Composer for builds but reports no security-scanning tools. The build tooling supports reproducibility, while the missing scanner is a modest transparency gap rather than a dependency blocker.

Security policycaution

The repository has no security policy. For a small algorithm library this is a limited process gap, but it gives consumers no documented route for reporting vulnerabilities.