devgroup/dotplant

Release historydanger

Only five releases exist, with no release in the last 12 months and the latest release published in April 2017. This is a major maintenance concern for a package that aggregates core application dependencies.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with its last push in April 2017. This strongly indicates abandonment rather than merely a slow development cycle.

Dependency profilecaution

This meta-package declares 17 runtime dependencies, including the CMS core and multiple project modules, so stale maintenance can affect a substantial dependency surface. The broad list is expected for a meta-package but increases the impact of its inactivity.

Repo toolingcaution

Composer is used for the build and dependency workflow, which is appropriate for this package. No repository security scanning is configured, leaving a transparency and maintenance gap, although the repository has no active workflow surface.

Security policycaution

The repository has no security policy. This is a transparency gap, especially for a package aggregating many runtime dependencies, though it is secondary to the much stronger evidence of long-term inactivity.