Package Health

cgoit/contao-folder-gallery-download-extension-bundle

Healthy and reasonable to adopt, with a short track record. It is actively released, tested, documented, and backed by a matching repository, but all recent commits come from one contributor and one workflow has write permissions.

Latest 1.2.0PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

70

Health Score Breakdown

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding install-time behavior that warrants review even though no dangerous workflow behavior was detected elsewhere.

Maintainerscaution

Only one registry account has publish access, which is a modest resilience concern; the repository is owned by the same individual rather than an organization that could more readily hand off publishing.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual user rather than an organization, so there is no organizational backing to offset the concentrated maintainer base.

Release historycaution

The package is only 29 days old with four releases, including a latest release today; this shows active development but leaves little evidence of long-term stability.

Repo bus factorcaution

All six commits in the last three months came from one contributor, creating a genuine continuity risk with no second active contributor shown.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Carsten Götzinger

Direct Dependencies

DependencyLast ReleaseScore
symfony/config
Version ^7.3
—
—
symfony/routing
Version ^7.3
—
—
contao/core-bundle
Version ^5.7
—
—
symfony/filesystem
Version ^7.3
—
—
symfony/http-kernel
Version ^7.3
—
—

Weekly Downloads

Info

Last Published
21 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform