kalamuna/kalaconfig

Dependency profilecaution

The package declares 16 runtime dependencies, including Drupal core and numerous modules, creating a substantial compatibility and upgrade burden for a release that has not been updated since 2019.

Release historycaution

The package has made only one release, on March 30, 2019, with no releases in the past seven years. This is strong evidence of abandonment risk, although the package is not registry-deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap and materially increasing abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. This is a modest transparency and maintenance-hygiene gap rather than evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The organizational backing provides some context but does not replace a published process.