zhyee/rrclic

Maintainerscaution

Only one account, zhyee, has registry publishing access. The linked project is user-owned rather than organization-backed, so the narrow maintainer base presents a real continuity concern.

Release historycaution

The package has made 13 releases since March 2020, but none in the last 12 months and the latest release was in April 2024. This indicates a meaningful maintenance gap despite its earlier regular cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no recent activity to offset the inactivity concern.

Repo toolingcaution

The repository uses Composer for builds, which fits the Packagist package ecosystem. No security scanning tools are present, a minor transparency weakness, but the absence is not severe enough to outweigh the stronger maintenance concerns.

Security policycaution

The linked repository has no security policy. For a package that fetches external market data and has dependencies, this reduces transparency around vulnerability reporting and response.