purplespider/basic-calendar

Release historycaution

Only two releases have been published over about two years, with one release in the last 12 months. This is a thin release history and provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and merged pull request provide some counterevidence, this still raises a meaningful maintenance-continuity concern.

Repo popularitycaution

The repository has only 3 stars, 1 fork, and 1 watcher. Low popularity is not disqualifying for a small module, but it offers little supporting evidence of broad community scrutiny.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning reduces supply-chain transparency without making the package unfit by itself.

Security policycaution

The repository has no security policy. For a small calendar module this is a hygiene gap rather than a severe risk, but it leaves vulnerability-reporting expectations unclear.