postyou/contao-webpack-encore-remote-bundle

Release historycaution

Only two releases were published, with the latest in August 2019 and none in the last 12 months. This is a substantial maintenance concern, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This weakens evidence of ongoing maintenance, though the recent repository push partly offsets the concern.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

No security policy was found in the linked repository. That reduces disclosure transparency for a package integrated into a web application.

Version stabilitycaution

The assessed release is still marked v1.0.0-RC2, and all recent releases are prereleases. That leaves compatibility and long-term support less certain than a stable release.