mediengarage/piwik-consent-manager

Lifecycle scriptscaution

A post-autoload-dump lifecycle script runs during installation, adding some execution-time supply-chain exposure even though no evidence shows it is harmful.

Repo bus factorcaution

All one recent commit came from a single contributor, creating concentration risk; organization ownership provides some ability to hand maintenance to others.

Repo commit activitycaution

There was one commit in the last 3 months, so maintenance is present but light and provides limited evidence of sustained development capacity.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected, leaving security hygiene less independently verified.

Security policycaution

The repository has no security policy, reducing transparency about how users should report vulnerabilities and how security issues are handled.