mautic/theme-coffee

Licensecaution

Neither the package nor the linked repository provides a declared or detected license file. This creates a real adoption and redistribution concern.

Release historycaution

The package has 39 releases since July 2021, but none in the last two years as of collection, despite a prior median interval of about 28 days. This is a meaningful maintenance warning, though the repository identifies itself as a read-only mirror managed centrally.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. Because the README says this repository is a read-only mirror, this is weaker abandonment evidence but still leaves the package's current maintenance path less transparent.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools were detected. For a small theme this is a modest transparency gap rather than a severe risk.

Security policycaution

The linked organization repository has no security policy. This does not show a vulnerability, but it provides less guidance for reporting and handling security issues.