kunstmaan/cms-skeleton

The stable major release and organization-backed repository provide useful context. Install-time hooks, absent security scanning, and a very small source tree leave limited transparency for ongoing maintenance.

Latest 7.2.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

post-install-cmd and post-update-cmd scripts run during dependency operations, adding execution surface for adopters. Such hooks can be normal for a Symfony Flex skeleton, but they still warrant more scrutiny than a package without install-time behavior.

Package file tree

The artifact and linked repository each contain only composer.json, leaving almost no visible documentation or source context for consumers to inspect.

Release history

The package has 34 releases since April 2019, but none in the last 12 months; its latest release was about 19 months before collection. This indicates a mature history but currently inactive release maintenance.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this points to stalled current maintenance.

Repo tooling

Composer is used as the build tool, but no security scanning tool is reported. This is a modest transparency and maintenance gap rather than evidence of an unsafe package.