viloveul/cms-consumer

Release historydanger

This package has only one release, published about 7 years ago, with no releases in the last 12 months. That is a substantial maintenance concern for a dependency, despite the repository still existing.

Lifecycle scriptscaution

A post-create-project-cmd lifecycle script runs during installation or project creation. This deserves review because install-time execution adds operational risk, though the signal alone does not show that it is unsafe.

Repo commit activitycaution

There were no commits or active maintainers in the measured 3-month period. Combined with a single release, this leaves weak evidence of current development, although the repository's August 2024 push is some compensating evidence.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher. This indicates a very small user base, but popularity is supporting evidence and does not independently determine package health.

Repo toolingcaution

The repository uses Composer as a build tool, but no security scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.