yezuozuo/venus

Package file treecaution

The published artifact and repository each contain only seven files, including three source files and one example. This may be appropriate for a small adapter, but it provides little evidence of a mature, extensively maintained project.

Release historycaution

The package has only two releases, both from October 2017, and none in the last 12 months. This is strong evidence of abandonment for a library that may need compatibility and security maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in October 2017. The repository is not archived, but that does not offset the prolonged inactivity.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security scanning tools are configured, leaving a minor repository hygiene gap that does not by itself establish a supply-chain defect.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a secondary concern compared with the much stronger evidence of long-term inactivity.