fritzmg/contao-newslist-extended

Licensecaution

The manifest declares LGPL-3.0-or-later, while the included and repository license file is GPL-3.0. This mismatch requires compatibility review before adoption.

Release historycaution

The package has 19 releases over more than nine years, but none in the last 12 months; the latest release was about 19 months ago. That suggests slowing maintenance, partly offset by the package's long history.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern for a dependency, despite the recent release history being otherwise established.

Repo toolingcaution

Composer build tooling is present, which supports a reproducible project structure, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and maintenance response. This is a minor transparency concern, not a severe dependency risk on its own.