mecha-cms/y.contrast

Release historycaution

Only two releases exist, with no release in the last 12 months; the latest release was about 19 months ago. This is meaningful maintenance concern, though the linked repository was pushed more recently.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. That weakens evidence of ongoing maintenance, although the repository is not archived.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This matters for a PHP package, but it is a hygiene gap rather than evidence of abandonment by itself.