zim32/cert-auth-bundle

Release historydanger

The package has had only 3 releases, all concentrated in November 2015, with no releases in the last 12 months. More than 10 years without a release is a strong abandonment concern for a security-sensitive bundle.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the package's long release gap. This leaves little evidence of ongoing maintenance or compatibility work.

Repo toolingcaution

Composer is used for project tooling, but no security scanning tools were detected. That is a meaningful hygiene gap for a security-sensitive package, although the absence of workflows avoids additional workflow risk.

Repository archivedcaution

The repository is not marked archived, which is a compensating signal, but its last push was over 10 years ago. The non-archived status does not offset the observed lack of recent development.

Security policycaution

No security policy was found for a package handling certificate authentication. This reduces transparency for reporting and managing security issues, especially given the absence of recent maintenance.