jjsoft-ar/flatly-theme

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding install-time behavior that deserves caution compared with a package without lifecycle hooks.

Release historycaution

The latest release was in September 2016, with no releases in the last 12 months and four releases overall; roughly ten years without a release is a substantial abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected; this is a minor transparency gap for a small theme and not the main adoption risk.

Security policycaution

No repository security policy was found, reducing the project's documented process for reporting vulnerabilities, though the package's small theme scope limits the severity of this gap.