zorbus/document-bundle

Release historydanger

This package has had only one release, on November 15, 2012, with none in the last 12 months. That long period without a new release is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2012.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link between the published package and source repository is not clearly established.

Repo toolingcaution

The repository uses Composer but has no security-scanning tooling. This is a modest supply-chain hygiene gap, with no evidence here of active build or release automation.

Security policycaution

The linked repository has no security policy. This is a transparency and maintenance gap, although it is less significant than the prolonged inactivity.