simplecms/company

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-owned, so there is no provided backing signal to compensate for this narrow publishing base.

Release historycaution

The package has had no registry release in about 2 years and 2 months, with zero releases in the last 12 months. The repository was pushed recently, which shows some activity but has not translated into published releases.

Repo bus factorcaution

One contributor made 100% of the commits in the last 3 months. That concentration leaves maintenance dependent on a single active person.

Repo commit activitycaution

The repository recorded only one commit in the last 3 months. This is evidence of some current maintenance, but the pace is thin for a package with no recent registry releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning lowers supply-chain transparency, though it is not severe on its own.