klapproth-koch/contao-event-news-categories

Package scaffoldingcaution

The published artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. The absence of tests and a changelog is not inherently problematic for a published Contao extension, but the missing README reduces consumer transparency.

Project backingcaution

The source repository is owned by an individual account, while the registry namespace is different. The linked repository name matches the package name, so the source appears appropriately connected, but no organizational backing compensates for the narrow maintainer base.

Repo bus factorcaution

All commits in the last three months came from one contributor, giving the project a very concentrated bus factor. Because the repository owner is an individual rather than an organization, there is no provided backing signal to offset that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, from one active maintainer. This is a real maintenance-capacity concern, despite the package's strong release frequency.

Repo toolingcaution

The repository uses Composer for builds, which fits this PHP package, but it reports no security-scanning tools. This is a transparency and review gap rather than evidence that the package is unsafe.