bigfork/silverstripe-recipe

Dependency profilecaution

The recipe declares 14 runtime dependencies spanning the CMS, deployment-related functionality, monitoring, and extensions. That breadth is consistent with a project recipe but increases the maintenance surface for consumers.

Release historycaution

This package has only one release, published about seven years ago, with no releases in the last 12 months. That weakens release transparency and raises the risk that this registry version is stale, although recent repository activity partly compensates.

Repo bus factorcaution

Two contributors were active recently, with the top contributor responsible for 75% of commits. The second active contributor and organization ownership reduce, but do not eliminate, concentration risk.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security scanning tool was detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response, although it is not evidence of a vulnerability itself.