gearmagicru/cms-base-edition

Dependency profilecaution

The package declares 75 runtime dependencies and no development dependencies, reflecting a large application bundle rather than a small library. The breadth increases upgrade and maintenance complexity, but matches the CMS package structure.

Release historycaution

This is the package's only release, published about 18 months ago, with no releases in the last 12 months. That limited history provides little evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, despite a last push about a year ago. This is meaningful evidence of slowed maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The standard build setup is positive, while the missing scanning is a modest transparency gap.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap, not evidence that the package is unsafe.