The package includes a changelog, a declared LGPL license, and a source repository whose name matches the package. Missing tests, security scanning, and a consumer README reduce transparency but are secondary concerns.
15%
Total Score
0
50
75
The registry marks the entire package as abandoned and names hofff/contao-multimedia as its replacement. This is a direct warning against taking a new dependency on this release.
The latest release was published in March 2016, with no releases during the last 12 months. More than 10 years without a release strongly indicates abandonment for a framework integration package.
The repository had zero commits and zero active maintainers during the last 3 months, consistent with the release history and showing no current maintenance capacity.
A changelog is present, but the package has no README and no tests. The changelog provides some release transparency; the missing README is a real consumer-documentation gap for a library package.
Composer and Phing provide build tooling, but no security scanning tools are present. The missing scanning is a modest hygiene gap rather than evidence of abandonment on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core Version ~3.2 | — | — |
google/apiclient Version ~2.0 | — | — |
discordier/httprequestextended Version ~1.1 | — | — |
menatwork/contao-multicolumnwizard Version ~3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.