getpop/component-model-configuration

Release historycaution

The package has 38 releases since February 2021, but none in the last 12 months and its latest release was about 3 years ago. This shows a mature history but a prolonged maintenance pause.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, consistent with the repository's last push about 3 years ago. The stable release history and organization backing do not compensate for this prolonged inactivity.

Repo toolingcaution

Composer is used as the build tool, providing ordinary ecosystem tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene concern rather than a severe dependency risk.

Repository archivedcaution

The repository is not archived, which preserves a path for future maintenance, but it was last pushed about 3 years ago and therefore does not provide evidence of current activity.

Security policycaution

The repository has no security policy and no documented security scanning tooling. This weakens transparency and maintenance assurance, although it is not by itself evidence that the package is unsafe.