trilobit-gmbh/contao-pkg-bundle

Release historycaution

The package has existed for about six years but has only five releases, with one release in the last 12 months and a typical interval of about 14 months. This indicates a slow maintenance cadence, though not abandonment by itself.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent release and push provide some compensation, but the short-term maintenance signal is still weak.

Repo toolingcaution

The repository uses Composer for builds, but no security-scanning tools are configured. This is a modest transparency and assurance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.