hauerheinrich/hh-ckeditor-font

Release historycaution

The package is only 190 days old and has two releases, with a median interval of about 149 days. That is limited evidence of sustained maintenance, so adopters should expect a still-maturing project.

Repo bus factorcaution

One contributor made all two commits during the last three months, leaving no demonstrated handoff capacity. Organization ownership provides some mitigation, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent development activity. This is a concern for a young package, although the recent push aligns with the assessed release.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is present. The small extension remains understandable, yet the missing automated security checks reduce supply-chain transparency.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap rather than evidence of malicious behavior.