skeeks/cms-marketplace

Maintainerscaution

Only one account has registry publish access, which is a resilience concern; however, the linked repository is organization-owned and recent release activity shows the package is still being published.

Repo bus factorcaution

All two recent commits came from one contributor, creating a concentrated maintenance dependency; the organization-owned repository provides some handoff capacity but does not eliminate the observed concentration.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not an abandonment verdict because recent commits and releases are present, but it provides little evidence of active community review.

Repo popularitycaution

The repository has only 3 stars, 0 forks, and 1 watcher, indicating limited community validation and a small external adoption base; popularity is supporting evidence rather than a standalone health verdict.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. The missing security automation is a transparency gap, though it is not itself evidence of malicious behavior.