mecha-cms/x.panel

Dependency profilecaution

Seven runtime dependencies, all within the same package family, create meaningful maintenance surface, although the focused dependency set is not unusually broad.

Release historycaution

Only two releases have been published since June 2022, with no release in the last 12 months and a median interval of about 829 days. This indicates a slow and potentially weakening release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long registry release gap, this is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. The missing automated security coverage is a modest hygiene gap.

Security policycaution

No security policy was found in the repository. This weakens vulnerability-reporting transparency, though it is not by itself evidence that the package is unsafe.