thinkcmf/cmf-install

Maintainerscaution

Only one registry account has publish access, leaving little publishing redundancy. The repository owner is a user account rather than an organization, so there is no provided backing evidence to offset that thin base.

Release historycaution

The package has 18 releases, but none in the 12 months before collection; its latest release was about two years ago. This is meaningful evidence of slowed maintenance, though not abandonment by itself.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months before collection, reinforcing the concern that maintenance has stalled.

Repo popularitycaution

The repository has zero stars, three forks, and two watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community support.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap, not a severe risk on its own.