wjdnw/flop-machine

Release historydanger

Only two releases were published, and none appeared in the last eight years; the latest release was in September 2018. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository has recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but that does not offset the lack of recent activity.

Licensecaution

The package declares MIT but its included license file is detected as Apache-2.0, creating a material licensing ambiguity. A license file is present, so this is not an unlicensed-release concern.

Maintainerscaution

The package has one registry maintainer, and the repository is owned by the same individual rather than an organization. This leaves limited visible maintenance capacity for an already inactive project.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though the package's small size limits its weight.