This is a young but currently credible package: it has a clear GPL-3.0-or-later license, a stable v1.1.0 release, no registry deprecation, no install-time lifecycle scripts, and a linked repository that is active, unarchived, and has two recent contributors. The main reservations are limited maturity evidence from only two releases over 47 days, no tests or changelog in either the artifact or repository, minimal repository adoption, no security policy or automated security scanning, and a single registry maintainer. These concerns warrant review before adopting it for a critical dependency, but the recent activity and coherent package contents indicate it is presently usable rather than abandoned.
78%
Total Score
80
100
81
90
Only one registry account has publish access, which creates publishing continuity risk. The repository's two active contributors provide some maintenance compensation, but registry access itself remains concentrated.
A substantial README documents installation and configuration, but neither the artifact nor repository contains tests or a changelog. For a young UI package this is a genuine maintenance and transparency gap, though the README provides useful compensating documentation.
The repository is owned by an individual user rather than an organization, so maintenance continuity depends more directly on the small contributor group.
The package is only 47 days old and has two releases, with a median interval of about 48 days. This is too short a history to demonstrate long-term maturity, although it does show an initial follow-up release rather than complete inactivity.
Composer build tooling is present, but no security-scanning tool is reported. The missing scanning is a hygiene gap, although it is not by itself evidence of unsafe or abandoned maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^9.1 | — | — |
medienreaktor/neos-studio Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.