yasha/yasha-base-backend

Release historydanger

The latest release was published in April 2020, with no releases in the last 12 months; the package has therefore gone about six years without a new release. This is strong evidence of abandonment risk for a backend package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Dependency profilecaution

The package declares nine runtime dependencies and no development dependencies. This is a manageable but meaningful dependency surface for an older backend stack, adding compatibility and update burden.

Maintainerscaution

Only one registry publishing maintainer is listed. Because the repository is user-owned rather than organization-owned, this indicates a thin publishing and continuity base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The absence of automated security checks increases maintenance risk, although it is not severe on its own.