akyos/cms-bundle

Lifecycle scriptscaution

The package defines a pre-autoload-dump install lifecycle script, adding installation-time behavior that deserves review, but this signal alone does not show harmful or unusually broad actions.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. The recent release and same-day repository push partly offset this, but the short-term maintenance record remains thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated dependency or code-security coverage unconfirmed.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities are reported and handled.