yottacms/yotta-security-bundle

Release historydanger

The package has had no release in about 8 years; all three releases appeared within a very short period in 2018, with none in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no update for about 8 years. This materially raises abandonment risk.

Lifecycle scriptscaution

A post-install command runs during installation, increasing the amount of package behavior that consumers must trust. No provided signal shows that this script is dangerous, so this is a hygiene concern rather than a severe risk.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of broad review or community adoption. Low popularity alone is not disqualifying, but it compounds the lack of recent activity.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. Build tooling is present, while the missing scanning reduces maintenance transparency.