external-packages/contao-splide-bundle

Release historydanger

Only two releases exist, with no releases in the last 12 months and the latest published about two years ago. This indicates weak ongoing maintenance for a package consumers may depend on.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing about two years without a release.

Licensecaution

The package declares LGPL-3.0-or-later, but the detected LICENSE file is MIT. Although a license file is present, the mismatch creates avoidable legal and redistribution uncertainty.

Package scaffoldingcaution

The artifact includes a README, but it is only 47 characters and provides no usage guidance. Missing tests and a changelog are expected packaging gaps here, while the repository also has no tests or changelog to compensate.

Repo toolingcaution

Composer is used for the build, which is appropriate for this package, but no security scanning tools are configured. That is a modest transparency and maintenance gap.