xinfox/think-annotation

Release historydanger

Only two releases were published, with the latest more than five years ago and none in the last 12 months. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap. No newer maintenance evidence compensates for this.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad user or maintainer base.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The missing scanning is a modest hygiene concern rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less serious than the package's prolonged inactivity.