withinboredom/distributed-hashmap

Release historydanger

The package has had only one release, published over five years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, and its last push was over five years ago. This indicates that fixes and maintenance are unlikely to arrive.

Repo popularitycaution

The repository has 3 stars, 0 forks, and 1 watcher. Low adoption provides little supporting evidence of maturity, but popularity is only supporting evidence and does not determine the verdict.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured. This leaves a useful maintenance safeguard absent, though it is secondary to the package's inactivity.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations unclear. This is a genuine transparency gap, though it is less serious than the lack of maintenance.