postyou/contao-proven-expert

Release historycaution

The package has had no registry release in about two and a half years, despite seven releases overall and a previously regular median interval of about 36 days. This raises maintenance uncertainty for consumers of the current release.

Repo bus factorcaution

All three recent commits came from one contributor, so maintenance depends heavily on a single person. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP extension this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This lowers transparency but is not by itself a severe dependency risk.