This is a small, clearly scoped Neos CMS package with an MIT license, a linked organization-owned repository, stable versioning, no registry deprecation, and a recent release. However, its maintenance history is sparse: only four releases over roughly five years, one release in the last year, and no active maintainers or commits in the last three months. The repository also lacks tests, security scanning, and a security policy, although the package is small and has a simple Composer-based structure with no install-time scripts or dangerous workflows. It appears usable, but adopters should verify compatibility and be prepared for limited ongoing maintenance.
69%
Total Score
75
50
78
90
There are three runtime dependencies and no development dependencies. The runtime dependency set is modest, but the absence of dev dependencies is consistent with the lack of repository tests and limits visible validation coverage.
Only one registry account has publish access, which is a modest publishing-continuity risk. This is partly mitigated by the linked repository being owned by an organization.
A README and GitHub Releases are present, but neither the artifact nor repository contains tests or a changelog. The missing tests are a genuine maintenance-confidence gap, while the missing changelog is less significant because release support is present.
The package has existed for about 1,900 days and has four releases, but the median release interval is about 569 days and only one release occurred in the last 12 months. This indicates slow, intermittent maintenance rather than strong release momentum.
No commits and no active maintainers were recorded in the last three months. Although the repository was recently pushed and had one merged pull request, the measured commit inactivity is a meaningful concern about current maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ~3.2 || ~4.0 || ~5.0 || ~7.0 || ~8.0 || dev-master | — | — |
neos/fusion-afx Version ^1.0 || ~7.0 || ~8.0 || dev-master | — | — |
flowpack/nodetemplates Version ~1.0 || ~2.0 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.