cvo-technologies/croogo-bootstrap

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is an additional execution surface and warrants caution, although the signal does not show that the script is harmful.

Release historycaution

The package has had only 3 releases, all concentrated between August 7 and August 23, 2016, with no releases in the last 12 months. This strongly raises abandonment risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a project that has not seen meaningful maintenance for years.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. That is a modest transparency and maintenance gap rather than evidence of severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a minor concern for a small theme package.