erdmannfreunde/tornado-theme-bundle

Dependency profilecaution

The package declares 13 runtime dependencies and no development dependencies. This is a substantial integration surface for a theme bundle and increases reliance on the compatibility and maintenance of surrounding packages.

Release historycaution

The package is only 1 day old, with four releases published in that time and a median interval of about 1 hour 16 minutes. This shows active initial publication but provides little evidence of sustained maintenance.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last 3 months. Because the package is only 1 day old, this is partly explained by its age, but it still leaves sustained maintenance unproven.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. This is a hygiene gap rather than a severe dependency risk, and the available evidence does not show an unsafe build process.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is a limited concern for this newly published package.