torfs-ict/cmsms

Release historydanger

The latest release was in January 2017, with no releases in the last 12 months despite the package being nearly ten years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Lifecycle scriptscaution

A post-root-package-install script runs during setup, adding install-time behavior that consumers should understand, but this is not independently severe and fits the package's project scaffolding role.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, though it does not outweigh the stronger inactivity evidence.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for handling vulnerabilities in a package with no recent maintenance.