It has a clear README, a stable version, and a focused dependency footprint. The source is intact but lacks tests and security documentation, while its small user and contributor footprint offers little evidence of ongoing support.
15%
Total Score
83
100
61
88
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe warning for a dependency and outweighs its otherwise usable metadata.
The package has only two releases, from May and June 2019, and none in the past seven years. That indicates prolonged abandonment risk.
There are no open issues or pull requests, but there is also no recent issue or pull-request activity. Combined with the old release date, this offers no evidence of active support.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy package, but this provides no supporting evidence of active adoption or community oversight.
Composer build tooling is present, but no security scanning tools are reported. This is a minor hygiene gap and not a severe risk by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ~4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.