Usable with caveats: the package is clearly licensed, backed by the matching Codefog organization repository, and not deprecated or archived. However, it has had no registry release for about 3 years 6 months and recorded no commits or active maintainers in the last 3 months.
60%
Total Score
83
100
88
88
Only one release exists, published about 3 years 6 months ago, with no releases in the last 12 months. This makes compatibility and ongoing maintenance less certain.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old release history, this raises a meaningful risk of slow maintenance.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk for this small package.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.13 | — | — |
terminal42/notification_center Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.