startpl/t2cms-composer

Release historydanger

This package has only one release, published about six years ago, with no releases in the past 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the last push in September 2020. The stable package may be intentionally complete, but there is no recent maintenance evidence.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. For a small plugin this is a transparency and maintenance gap, though not severe on its own.

Security policycaution

The repository has no security policy. This modestly reduces transparency for reporting and handling vulnerabilities, but it is secondary to the maintenance evidence.