shallowred/kirby-layouts

Package scaffoldingcaution

The artifact includes a README, but it is explicitly a generic Pluginkit template with placeholders such as the plugin name, author, and API documentation. The absence of tests and a changelog is normal for a published plugin artifact, so the concern is limited to incomplete consumer documentation.

Release historycaution

The package has had four releases, all clustered around September 2024, with no releases in the following 12 months. That limited history and long pause reduce confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the last push being in September 2024. This is a meaningful abandonment concern for a package still at version 0.1.3.

Repo package mentioncaution

The repository name matches the package, which supports ownership, but the README does not mention kirby-layouts and instead presents a generic example plugin. That weakens transparency about what this specific package provides.

Security policycaution

The linked repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is not evidence that the package is unsafe by itself.