zvax/stepping

Release historydanger

The package has had no release in over four years, despite 15 releases overall. This is a substantial maintenance and abandonment concern for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these values provide no meaningful community signal to offset the inactivity.

Repo toolingcaution

Composer build tooling is present, which supports reproducible package handling, but no security scanning tools were detected. The missing scanning is a modest supply-chain hygiene gap.

Security policycaution

No security policy is present, leaving vulnerability reporting expectations unclear. This is a transparency gap, though it is less serious than the demonstrated maintenance inactivity.