backpack/theme-coreuiv2

Package scaffoldingcaution

A substantial README documents the package's purpose, compatibility rationale, and installation, while tests and a changelog are absent. The missing tests and changelog are genuine hygiene gaps, although the package is a mature, backward-compatibility theme and the repository has GitHub Releases.

Repo bus factorcaution

All two recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment signal.

Repo commit activitycaution

Only two commits were made in the last three months by one active maintainer, indicating low recent implementation activity. This is partly consistent with the package's stated role as a backward-compatibility theme with no planned new features, but it still limits evidence of active maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning reduces security-process transparency, though it is not by itself evidence that the package is unsafe.

Security policycaution

No repository security policy is provided, which is a transparency and vulnerability-reporting gap. This lowers confidence in the project's security process but does not indicate abandonment on its own.