yamaguppy31/debug-timer

Release historydanger

The package has only two releases, both dated June 25, 2019, with no releases in the last 12 months. That long period without a release is a substantial maintenance and compatibility concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been abandoned for about seven years. No provided activity signal compensates for this.

Package scaffoldingcaution

A README is present, but it is only 19 characters and provides virtually no consumer guidance; the absence of tests and a changelog in the artifact is normal packaging practice and is not penalized.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. This weakens confidence that the linked repository clearly backs the published package.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. This is a modest transparency gap, secondary to the much stronger abandonment evidence.