egobude/docker-neos-template

Release historydanger

The latest release was published about 9 years ago, with no releases in the last 12 months. This strongly suggests abandonment despite the package having three historical releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and leaving current maintenance unverified.

Licensecaution

The manifest declares GPL-3.0+, while the repository license file is detected as MIT. Although a repository license exists, the mismatch creates genuine legal and provenance uncertainty.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These are relevant supply-chain exposure during installation and should be inspected before adoption, though their presence alone does not show harmful behavior.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported. This is a maintenance and assurance gap, though it is less significant than the prolonged inactivity.