unite-cms/media-bundle

Release historydanger

The latest release was nearly seven years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package intended as an ongoing dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap and indicating no observed maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although organization-owned subpackages can use separate repositories, this leaves package ownership and source correspondence less transparent.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap, while the build tooling is a compensating positive.

Security policycaution

The repository has no security policy. This does not prove a security problem, but it reduces transparency about how vulnerabilities are reported and handled.