mark-wff/craft-var-dumper

Release historycaution

The latest release was about 3 years and 6 months ago, with no releases in the last 12 months. This is substantial evidence of slowing maintenance for a package tied to an evolving CMS.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no recent activity showing ongoing maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The build setup is appropriate for the package, while the missing scanning reduces supply-chain hygiene.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response. This is a meaningful hygiene gap, though it is not evidence that the package is unsafe.