bearcms/audits-addon

Dependency profilecaution

Five runtime dependencies create a meaningful dependency surface for this CMS addon, though the profile is not unusually large for a framework-integrated package. This is a modest maintenance consideration rather than a severe concern.

Release historycaution

The package is mature, with releases over about seven years and 20 releases overall, but only one release in the last 12 months. This supports continued maintenance while indicating a relatively slow current cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the release was recent, the lack of ongoing source activity lowers confidence that issues will receive timely attention.

Repo toolingcaution

The repository uses Composer, but no security scanning tool was detected. Build tooling is present; the missing automated security coverage is a minor transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no stated route for reporting vulnerabilities or documenting security response. This weakens security transparency but does not by itself make the release unfit.