codem/silverstripe-damn-fine-uploader

Dependency profilecaution

Six runtime dependencies create a meaningful dependency surface for a file-upload package, but the profile is not unusually large and no other signal indicates problematic dependency behavior.

Repo commit activitycaution

There were 0 commits and 0 active maintainers during the last 3 months. Although the repository was pushed recently and the release is current, the absence of sustained commit activity is a meaningful maintenance warning.

Repo popularitycaution

The repository has only 2 stars and 4 forks, indicating limited visible adoption. Popularity is supporting evidence rather than a verdict, so this lowers confidence in maturity but is not by itself a severe risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning reduces supply-chain maintenance transparency without independently making the package unfit.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap for a package handling uploads.