contao-components/mediabox

Release historycaution

The package has nine releases since 2014, but none in the last 12 months and the latest release was over two years ago. That indicates limited recent maintenance for a dependency that may still need compatibility updates.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long gap since the latest release and increasing abandonment risk.

Repo popularitycaution

The repository has only 5 stars and no forks, so there is limited public adoption evidence. Popularity is supporting evidence rather than a decisive health measure, especially for a small ecosystem component.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency gap, though the package is a small static asset integration.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.