elgg/community_plugins

This is a usable, established package with a stable release, an explicit GPL-2.0-only license, organization backing from Elgg, a matching repository, tests, and a recent release and repository push. However, maintenance activity is uneven: the repository shows no commits or active maintainers in the last 3 months, 33 open issues with no issues closed in the last month, and no security scanning or security policy. The package is not deprecated or archived, and its recent release activity partially offsets the repository-activity concerns, but adopters should expect a relatively thin maintenance and security-transparency posture.

Latest 2.3.11

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded 0 commits and 0 active maintainers over the last 3 months. The recent release and push provide some compensating evidence, so this is a maintenance caution rather than a severe abandonment finding.

Repo issue activity

There are 33 open issues, with no new or closed issues in the last month and no open pull requests; this suggests unresolved maintenance backlog despite one merged pull request.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured, leaving a security-transparency and automated-review gap.

Security policy

The repository has no SECURITY policy, reducing transparency around vulnerability reporting and coordinated maintenance.