58%
Total Score
50
100
83
100
The manifest declares a proprietary license, so the release is licensed but may restrict use, modification, or redistribution in ways that do not suit an open-source dependency.
One registry maintainer publishes the package. The linked repository is owned by the same individual, so this is a thin but consistent maintainer base rather than unexplained publishing access.
The package has only 5 releases since December 2018 and none in the last 12 months; its latest release was about 17 months ago, indicating a quiet release cadence.
The repository had 0 commits and 0 active maintainers in the last 3 months, which provides no recent evidence of ongoing maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ~5.3 | — | — |
alnv/catalog-manager Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.