Recent publishing shows the project is still maintained, but only one commit from one contributor in the last three months limits confidence in its maintenance depth. Organization backing, licensing, and security tooling improve the outlook, while workflow dependencies are not pinned.
68%
Total Score
67
50
86
50
Seven runtime dependencies, including Neos CMS and several Carbon packages, indicate a meaningful integration surface and a relatively coupled dependency profile.
The package includes GitHub release notes for this exact version, which documents the release. No artifact tests or changelog are not concerns for this kind of PHP package, but the absent package README modestly reduces consumer transparency.
The package has been published for about 3 years and latest release 0.5.0 arrived recently, but only 1 release appeared in the last 12 months. This indicates ongoing availability with a slower cadence.
One contributor made all commits in the last three months. The organization-owned repository provides some handoff capacity, but current observed activity remains concentrated.
There was 1 commit in the last three months, showing some recent activity but a very thin maintenance cadence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^8.3 | — | — |
carbon/eel Version ^2.7 | — | — |
carbon/fileloader Version ^0.1 | — | — |
carbon/rangeeditor Version ^0.2 | — | — |
carbon/geomapeditor Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.