wise/module-wlubyattrset

Release historydanger

The package has only one release, published nearly eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo popularitycaution

The repository has 4 stars, 0 forks, and 1 watcher, indicating very limited visible adoption. Popularity is supporting evidence rather than decisive proof, but it provides little maintenance confidence here.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. That is a modest supply-chain hygiene gap rather than evidence that the package is unsafe.

Repository archivedcaution

The repository is not archived, which avoids a severe abandonment signal, but its last push was nearly eight years ago and does not offset the stale release history.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the stale maintenance record.