zantolov/toolbelt-dev

Release historydanger

The latest release was in January 2020, over six years ago, with no releases in the last 12 months. This is strong evidence that the published dependency is stale despite the repository being updated later.

Dependency profilecaution

Six runtime dependencies are all development and static-analysis tools, which is coherent for this package but still creates a relatively broad dependency surface for a small 0.0.4 release.

Licensecaution

No license is declared, detected, or included in the package or repository. That creates a material adoption and redistribution risk with no provided evidence to compensate for it.

Repo commit activitycaution

There were no commits in the last three months and no active maintainers during that period. The recent repository push provides some contrary evidence, but does not show sustained maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it is not evidence of a vulnerability itself.