sfachinger/contao-hello-world-bundle

Release historydanger

This is the package's only release, published in January 2022, with no releases in the following four years and eight months. That strongly raises abandonment risk, despite the stable version designation.

Repo commit activitydanger

The repository recorded no commits or active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but that does not compensate for absent recent work.

Maintainerscaution

One registry publisher is a thin maintainer base for a package with no recent release or commit activity. This limits visible maintenance capacity, although the repository is user-owned rather than organization-backed.

Repo toolingcaution

Composer build tooling is present, which supports reproducible project structure, but no security scanning tools were detected. The tooling is therefore only partial evidence of ongoing project hygiene.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it is less significant than the package's apparent inactivity.