Its stable versioning and clear package identity reduce adoption friction. The package is licensed, documented, and has no install-time scripts, but its long maintenance gap makes it a poor fit for new projects.
40%
Total Score
50
100
75
75
The package has 18 releases since February 2014, but none in the last seven years; the latest release was in April 2019. This strongly increases abandonment and compatibility risk despite the earlier release history.
There were zero commits and zero active maintainers in the last three months. Combined with the old last push, this is strong evidence that maintenance has effectively stopped.
Composer is used for builds, but no security-scanning tool is detected. This is a transparency and maintenance gap, although it is less important than the lack of recent development.
The linked repository is not archived, but it was last pushed in March 2020. The unarchived status provides some continuity while the old activity still signals likely stagnation.
The repository has no security policy. That leaves vulnerability-reporting expectations unclear, adding a maintenance and transparency concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^3.5.1 || ~4.2 | — | — |
agentur1601com/dlh_geocode Version >=1.1.2 | — | — |
contao-community-alliance/composer-plugin Version ~2.4 || ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.