convergine/craft-bastion

Licensecaution

The artifact contains an MIT license file, but the package manifest declares the license as proprietary. That mismatch creates avoidable uncertainty for adopters despite the presence of a license file.

Release historycaution

This is the only release, published 194 days ago, so there is not enough release history to demonstrate sustained maintenance. The single initial release is a caution rather than evidence of abandonment on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a plugin that performs security monitoring and access-control functions, this is a meaningful maintenance concern.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. The missing scanning reduces repository hygiene and transparency for a security-focused plugin.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and disclosure expectations undocumented for a plugin whose stated purpose includes security features.