praxisnetau/silverstripe-vanilla

Release historydanger

Only two releases were published, with the latest on 2017-11-23 and none in nearly nine years. This strongly suggests abandonment risk for a package used as a project dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the old registry release, this is strong evidence of little current maintenance.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. This is a modest supply-chain transparency gap rather than evidence of an unsafe release.

Repository archivedcaution

The linked repository is not archived, although its last push was in September 2023, nearly three years before this assessment. The active repository status is positive, but the age of the last push supports maintenance concern.

Security policycaution

The repository has no security policy. For a small theme package this is a transparency gap, though it is less significant than the lack of current release and commit activity.