hofff/contao-dca-notification

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the repository having been untouched since April 2022. This is the strongest evidence of abandonment risk.

Release historycaution

Only two releases exist, with the latest published in April 2022 and none in the last 12 months. This indicates a long period without release maintenance, although the package may be stable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The gap matters more because recent maintenance activity is absent.

Workflow auditcaution

All five workflow action references are unpinned, and the audit found a high-confidence condition that always evaluates to true. There are no untrusted checkouts, script injections, or broad top-level write permissions, so this is workflow hygiene rather than a severe dependency risk.