black-lamp/blcms-shop-template

Release historydanger

The package has had only two releases, both in December 2016, with no release in more than nine years. This strongly indicates abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in more than nine years.

Dependency profilecaution

The package declares 19 runtime dependencies, including several project-specific components, creating a broad maintenance and compatibility surface for an otherwise very old release.

Lifecycle scriptscaution

A post-install-cmd script runs during installation, adding execution during dependency setup and some supply-chain exposure. The signal does not show that the script is malicious or unsafe.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is reported. This is a transparency and maintenance gap, though it is less important than the absence of recent development.