heart-bits/contao-recipes-bundle

Release historycaution

The package has six releases, but none in the last 12 months and the latest release was over two years ago. Recent repository activity partly offsets the release gap, but the published version may not reflect current source changes.

Repo bus factorcaution

All 16 recent commits came from one contributor, creating a genuine continuity risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The straightforward PHP package structure limits the significance of this gap, so it is a minor concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it does not by itself indicate an unsafe package.

Version stabilitycaution

Version 0.2.0 is not a stable major release, so the package may still experience compatibility changes. This is a moderate maturity concern rather than evidence that the release is unusable.