inupress/core

Release historycaution

The package is only 0 days old and has two releases, published about 3.6 hours apart, so there is little evidence of sustained maintenance or release discipline.

Repo bus factorcaution

All seven recent commits came from one contributor, creating a concentrated maintenance dependency. Organization ownership partly compensates because maintenance can potentially be handed off.

Repo commit activitycaution

Seven commits were recorded in the last 3 months, which shows recent work but remains a small maintenance record for a newly published package.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are reported. The missing scanning is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less transparent for a package intended to run inside a CMS.