fritzmg/contao-news-image-override

Licensecaution

The manifest declares LGPL-3.0-or-later, while the artifact and repository license files were detected as GPL-3.0. The release is licensed, but the mismatch creates uncertainty for consumers.

Maintainerscaution

Only one registry maintainer is listed, and the project is backed by an individual repository owner rather than an organization. That leaves limited visible continuity if the maintainer becomes unavailable.

Release historycaution

This mature package has nine releases, but none in the 12 months before collection and its latest release was more than two years old. That suggests a slow or inactive maintenance cycle.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap. This raises maintenance and abandonment concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup supports reproducibility, while the missing scanning reduces defensive coverage.