heimrichhannot/contao-news-bundle

Dependency profilecaution

The package declares 16 runtime dependencies, including several related bundles and external API libraries. This broad dependency surface increases compatibility and maintenance exposure.

Release historycaution

The package has 79 releases since November 2017, but none in the last 12 months; its latest release was over two years ago. This is a meaningful sign of slowing maintenance despite the mature release history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, consistent with the long release gap. This raises abandonment risk, though the repository is not archived.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern.

Security policycaution

The repository has no security policy. That weakens the project's documented process for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.