netserva/cms

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, following the concentrated release period. That is the strongest indication of slowing or paused maintenance.

Lifecycle scriptscaution

Both post-install-cmd and post-update-cmd scripts run during dependency operations. Install-time behavior deserves caution because it adds execution beyond ordinary package loading.

Release historycaution

The package has 10 releases in the last 12 months, but they were concentrated between November 4 and November 29, 2025; no release followed for about ten months before collection. This suggests an unproven maintenance trajectory despite the active initial burst.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is configured. The missing scanner weakens automated assurance without proving a maintenance failure.

Security policycaution

The linked repository has no security policy. For a CMS with admin and content-management functionality, that is a transparency gap for reporting and handling vulnerabilities.