joomla/data

Release historycaution

The package has a long history and 17 releases, but it has had no release in the last 12 months despite a median release interval of about 69 days. That is a meaningful slowdown for a maintained dependency.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance dependent on a single active individual. The organization-owned repository provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

There were three commits in the last three months, showing recent activity, but the pace is modest for a maintained library.

Repo toolingcaution

The project uses Composer, but no security-scanning tool was detected. This is a hygiene gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings. Its one action reference is unpinned, which is a modest reproducibility concern, while the absence of a top-level permissions block is acceptable on its own.