aimeos/aimeos-typo3

Licensecaution

The manifest declares LGPL-3.0-or-later, while the artifact license file was detected as GPL-3.0. Although both the artifact and repository contain license files, the declaration mismatch warrants clarification before adoption.

Lifecycle scriptscaution

The package defines a post-update-cmd lifecycle script. Such hooks can be legitimate, but they add install or update-time behavior that should be understood before deployment.

Repo bus factorcaution

One contributor made all two commits in the last three months, giving that contributor a 100% share. The project is not identified as organization-owned, so this concentration is a genuine continuity concern.

Repo commit activitycaution

Only two commits were recorded in the last three months, with one active maintainer. Recent source activity is present but sparse, so this modestly lowers confidence in ongoing maintenance momentum.

Repo toolingcaution

The repository uses Composer and Phing for builds, which supports repeatable project maintenance. No security-scanning tools were detected, leaving a security-process gap.