neos/app

Release historydanger

The latest release was about ten years ago, and there have been no releases in the last 12 months. The seven releases were concentrated within roughly 23 minutes, indicating a completed or abandoned initial publication rather than ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push having occurred about ten years ago. No provided activity signal offsets this lack of maintenance.

Lifecycle scriptscaution

The package runs post-create, post-install, and post-update Composer scripts. These scripts may be appropriate for an application starter, but they increase installation and update complexity in an old, inactive package.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. Although name differences can occur in subpackages, this combination makes package ownership and provenance unclear.

Repo toolingcaution

Composer is used as a build tool, which is appropriate for this package, but no security scanning tool is present. The missing scanning is a meaningful hygiene gap for an application-oriented package.