The project has a clear MIT license, a usable README, and a source repository that matches the package and is backed by an organization. Its small, coherent codebase and lack of install-time scripts reduce adoption risk, although repository security practices are limited.
62%
Total Score
75
100
83
67
The package has existed for over 11 years with 11 releases, but it has had no release in the last 12 months. That recent pause lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release was pushed over a year ago, the lack of recent activity raises abandonment risk.
There are four open issues and no issue or pull-request activity in the last month. This is a minor sign of limited current engagement, consistent with the quiet commit record.
The repository has 11 stars and 8 forks. This is modest adoption, but popularity is supporting evidence and does not by itself indicate poor package health.
The project uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^5.3 | — | — |
codefog/contao-haste Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.