silverstripe/installer

Repo bus factorcaution

One contributor made all three commits in the last three months, concentrating recent maintenance. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only three commits were recorded in the last three months. That shows some recent work but is a thin maintenance signal for a package with this release cadence.

Repo toolingcaution

Composer and Phing build tooling are present, but no security scanning tools were detected. This is a modest transparency and defensive-maintenance gap.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less transparent, though it is not evidence of unsafe code by itself.

Version stabilitycaution

The assessed version is a release candidate, and 70% of recent versions are prereleases. That lowers confidence for consumers seeking a production-stable release.