leadingsystems/contao-cajax

Licensedanger

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. This creates a material transparency and dependency-use concern.

Release historycaution

The package has existed for over eight years but has only nine releases, with one release in the last 12 months and a typical interval of about nine months. That indicates a slow maintenance cadence, though the package is not abandoned outright.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although a recent release exists, the lack of observed ongoing activity raises maintenance risk.

Repo popularitycaution

The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community review or adoption.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are reported. The missing scanner is a hygiene limitation rather than evidence that the release is unsafe.