yottacms/yotta-phpsettings-bundle

Project backingcaution

The repository owner is a user account rather than an organization, so there is no demonstrated organizational backing to offset the single-publisher and inactive-project signals.

Release historycaution

The latest release was published in May 2018, and there have been no releases in the last 12 months. More than eight years without a release is a substantial abandonment concern, despite the package not being deprecated.

Repo commit activitycaution

The repository had zero commits and zero active maintainers during the last three months. Combined with the long period since the last push, this indicates little observable maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. The absence matters more because commit activity has also stopped.