core23/matomo-bundle

Registry deprecationdanger

Packagist marks the package abandoned and names nucleos/matomo-bundle as the replacement. This is a serious adoption concern even though the release itself is current.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some counterevidence, but the short-term development pause remains a maintenance concern.

Security policycaution

The repository has no security policy file. This does not show a vulnerability, but it weakens the project's process transparency for reporting and handling issues.

Workflow auditcaution

All three workflows were analyzed with no reported audit findings or untrusted sinks, but all four action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.