dnadesign/silverstripe-securityheaders

Release historycaution

Only three releases have appeared since May 2022, with no release in the last 12 months and a long median interval between releases. This suggests slow maintenance, though the package is still relatively young and not deprecated.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the absent releases in the last year, this is evidence of a thin current maintenance stream.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a security-focused extension.