webbuilders-group/silverstripe-deployment-notes

Release historycaution

The package has had no release in nearly seven years and none in the last 12 months, despite a stable 2.0.2 version. This is meaningful abandonment risk, though the small four-release history could reflect a mature, infrequently changing module.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially raises maintenance and abandonment risk.

Repo toolingcaution

The repository uses Composer for builds, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency weakness rather than proof of unsafe code.

Security policycaution

The repository has no security policy. That weakens the process for reporting and handling vulnerabilities, especially when recent maintenance activity is absent.