smart-cms/seo

Package scaffoldingcaution

The artifact includes a README and the repository has tests, while tests and changelogs are not expected in published Composer artifacts. However, the README contains placeholder text and no release notes are provided for this version, which weakens consumer documentation.

Release historycaution

The package has only four releases, all concentrated in June and July 2025, with no releases in the last 12 months despite being 447 days old. This suggests a young project whose maintenance cadence has stalled.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed recently, there is no observed recent development activity to demonstrate ongoing maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a package intended to be integrated into applications, though it is not evidence of a security defect by itself.

Workflow auditcaution

All seven analyzed action references are unpinned, and two workflows grant top-level write permissions. A high-confidence bot-conditions finding in the Dependabot auto-merge workflow adds workflow hygiene risk, though no untrusted checkout or script-injection sink was detected.