skom/fotoblog-sitepackage

Release historydanger

Only five releases were published, all within a short period ending in June 2021, with none in the following more than five years. This strongly indicates abandonment risk despite the stable version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in more than five years. The repository is not archived, but current maintenance capacity is not demonstrated.

Licensecaution

The artifact declares GPL-2.0-or-later but its license file is detected as GPL-3.0. A license file exists, so licensing is not absent, but the declaration mismatch creates avoidable legal ambiguity.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance weakness, especially alongside the inactive repository.

Security policycaution

The linked repository has no security policy. For a package with no recent maintenance activity, this further limits transparency about vulnerability reporting and response.