contentful/core

Release historycaution

The package has 37 releases over more than eight years, but no releases in the last 12 months; the latest release was over two years ago. This is meaningful evidence of reduced release maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the repository was recently pushed, the measured development activity is currently absent and lowers maintenance confidence.

Repo issue activitycaution

There is only one open issue and one pull request was merged in the last month, but there were no new or closed issues and seven pull requests remain open. This indicates limited recent activity without proving abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The repository's security policy provides some compensation, so this is a minor hygiene concern rather than a severe risk.

Workflow auditcaution

All workflows were analyzed, use read-only permissions, and have no untrusted checkouts or script injection. However, all four action references are unpinned and the workflow repeatedly installs packages outside a lockfile, creating reproducibility and supply-chain hygiene concerns.