georgringer/news-importicsxml

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Combined with the old package release, this points to a real risk of inactive maintenance.

Maintainerscaution

Only one registry account has publish access. That is a modest bus-factor concern for a user-owned project, though repository activity and ownership signals provide some supporting context.

Release historycaution

The last registry release was on June 9, 2018, with no releases in the last 12 months. That long release gap is a meaningful maintenance concern for a package tied to a changing CMS ecosystem.

Repo issue activitycaution

There are 15 open issues and two open pull requests, but no new or closed issues or pull requests in the last month, suggesting limited current project responsiveness.

Repo toolingcaution

Composer is used for builds, which is appropriate for this PHP package, but no security scanning tools are configured; the missing scanning is a transparency gap rather than evidence of unsafe code.