bkwld/decoy

Release historycaution

The package has 98 releases since August 2013, but its latest release was December 2021 and it has had no releases in the last 12 months. The long release history shows maturity, while the extended release gap raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that is no longer actively maintained. Its last push was in September 2023, which provides some evidence of prior activity but does not offset the current inactivity.

Repo toolingcaution

Composer is used as a build tool, but the repository reports no security scanning tools. The missing scanning is a modest transparency gap, not evidence that the package is unfit by itself.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear. This matters for a framework-integrated CMS package, although it does not by itself establish abandonment.