islandora/islandora_defaults

Registry deprecationdanger

Packagist marks the entire package as abandoned and names islandora/islandora-starter-site as its replacement. This is a direct indication that new projects should not depend on it.

Release historydanger

The package has had no releases in more than three years, despite having nine releases overall. Its historical cadence does not compensate for the prolonged lack of new releases.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. This is consistent with the package's deprecated status and leaves no evidence of ongoing maintenance.

Repository archiveddanger

The linked repository is archived, confirming that the source project is no longer an active development target. This substantially increases abandonment and maintenance risk.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but all nine action references are unpinned and a high-confidence medium-severity secrets-inherit finding was reported. These are workflow hygiene concerns, secondary to the package's deprecated and archived status.