The package is small and focused, with two runtime dependencies and no install-time scripts. Its release notes document this version, but confirm the proprietary terms and maintenance expectations before adopting it.
58%
Total Score
50
100
79
75
The manifest declares a proprietary license, but no license file was detected in the package or repository. This is licensed metadata rather than an unlicensed release, but the terms may restrict dependable reuse and should be confirmed.
The registry and repository are owned by the same individual account, providing ownership alignment but no organizational backing. This leaves the project dependent on a single maintainer.
The package has six releases since September 2019, but none in the last 12 months and its latest registry release was January 2024. That long release gap raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months. Despite the recent push timestamp elsewhere, the observed commit window provides weak evidence of ongoing maintenance.
The repository name does not match the package name, and no README mention was available. This may be normal naming for a bundle, but the collected evidence does not confirm the repository-package relationship.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ~4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.