avisota/contao-message

Release historydanger

The package has 50 releases since March 2015, but none in the last eight years; the latest release was in June 2018. That extended release gap is a substantial abandonment concern.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with no meaningful repository activity since June 2018. This is the strongest maintenance concern.

Dependency profilecaution

Nine runtime dependencies, including Contao and several Avisota components, create a meaningful compatibility surface for this older CMS extension. The count alone does not indicate an unsafe dependency profile.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these very low adoption indicators provide little external evidence of ongoing community support.

Repo toolingcaution

The repository uses Composer and Phing, showing established build tooling, but it has no security scanning tools. That is a modest transparency and maintenance weakness, not proof of a defect.