xddesigners/silverstripe-csrf-hydrate

Release historycaution

The package was first and last released today, with only one release and no established release history. This is an important maturity gap, although the release is too new for inactivity alone to indicate abandonment.

Repo commit activitycaution

There were no commits or active maintainers in the last three months beyond the initial project publication. Because the package is newly released, this primarily means maintenance capacity is unproven rather than demonstrating long-term abandonment.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but popularity is not required for a small, focused package and the project is newly released.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling is present. The missing scanning is a transparency gap, though the repository has no workflows that would otherwise introduce workflow-specific risk.

Security policycaution

The repository has no security policy. For a package that handles CSRF-token endpoints, the absence of a documented vulnerability-reporting process is a meaningful transparency gap.