cornernote/ckfinder-assets

Release historydanger

The package has had only two releases, with the latest about 12 years ago and none in the past 12 months. This is strong evidence of abandonment, though the asset package may be intentionally stable.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. This is a modest transparency and maintenance gap for an old package.

Repository archivedcaution

The linked repository is not archived, but its last push was about 12 years ago. The unarchived status provides little compensation for the prolonged inactivity.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, especially because the bundled artifact contains executable PHP and JavaScript files.