metamodels/contao-frontend-editing

Dependency profilecaution

Nine runtime dependencies make this a moderately coupled integration package, increasing reliance on compatibility across Contao, MetaModels, Symfony, and related components.

Release historycaution

The package has five releases over roughly seven years, with no release in the last 12 months and a median interval of about 567 days; this indicates slow maintenance rather than abandonment by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a meaningful maintenance concern even though the repository was pushed more recently than that window.

Security policycaution

No security policy was found in the repository, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All six action references are unpinned, and the audit found a high-confidence, high-severity condition that always evaluates true. The workflow has no untrusted checkout or script-injection path, so this is workflow hygiene risk rather than a severe adoption blocker.