marke/contao-themeless-bundle

Package scaffoldingcaution

A changelog and GitHub release exist for the assessed version, but the package has no README and no tests; the release documentation partly offsets the missing consumer guidance.

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance dependent on a single active person and increasing continuity risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected; this is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations and response guidance undocumented.

Version stabilitycaution

Version 0.2.3 is not a stable major release, so its API may still change, although it is not marked as a prerelease and recent releases are stable.