processmaker/package-skeleton

Release historycaution

Only two releases exist, with the latest published more than six years ago and none in the last 12 months. The repository's later push provides some compensating evidence, but registry maintenance for this release line is very weak.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. The January 2026 push reduces abandonment concern somewhat, but current development activity is still thin.

Repo issue activitycaution

There are no open issues and eight open pull requests, with no new or merged pull requests in the last month; the unresolved pull requests suggest limited recent maintenance follow-through.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and assurance gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.