fortytwo-studio/craft-cms-boilerplate

Dependency profilecaution

The boilerplate declares 12 runtime dependencies, including Craft CMS and multiple plugins. This is plausible for its stated purpose but creates a wider upgrade and compatibility surface.

Lifecycle scriptscaution

The package runs post-install commands that perform setup, database import, npm installation, and script removal. That behavior fits a project boilerplate but adds install-time side effects and operational risk.

Project backingcaution

The registry namespace is an organization name, but the linked repository is owned by an individual account. The ownership context does not show clear organization backing, limiting confidence in maintainer capacity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of slowed maintenance despite the package’s recent release history.

Repo toolingcaution

Composer is used as the build tool, providing expected project tooling. No security scanning tools are configured, leaving automated vulnerability coverage weaker.