mediatis/one-trust-utility

Repo commit activitydanger

There were no commits and no active maintainers in the past three months. Combined with the last push being nearly two years ago, this is the clearest sign that maintenance may have stalled.

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script. This adds some installation complexity, but the signal provides no evidence that the script is unsafe or unusually broad.

Release historycaution

The package has five releases over about four years, but none in the last 12 months; the latest release was nearly two years ago. This indicates slowing maintenance, though the release history is established rather than abandoned outright.

Repo toolingcaution

Composer is used as the build tool, providing ordinary project tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern rather than proof of a defect.

Security policycaution

The repository has no security policy. For a package that provides frontend and backend consent utilities, this leaves vulnerability-reporting expectations unclear.