automad/package-installer

Release historycaution

The package has had no release in nearly six years, with only four releases overall. Its stable version and non-deprecated status reduce the risk somewhat, but the long release gap suggests limited ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Together with the old latest release, this indicates maintenance has effectively stopped, although the repository is not archived.

Repo toolingcaution

The repository uses Composer build tooling, appropriate for this package, but has no security scanning tools. This is a modest hygiene gap rather than evidence that the package is unfit to use.

Repository archivedcaution

The repository is not archived, which preserves a path for maintenance, but its last push was nearly five years ago and therefore does not demonstrate active upkeep.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency concern, partly limited by the package's small scope.