This release appears to be a healthy dependency candidate: it is not deprecated or archived, has a very recent repository push, 19 releases over 84 days, and 124 commits in the last three months. The organization-owned repository and two active contributors provide meaningful maintenance backing despite highly concentrated commit activity. The main reservations are limited project hygiene and security transparency: the artifact has no README, tests, or changelog, the repository has no tests or changelog, no security scanning or security policy was detected, and workflow token permissions are not explicitly restricted at the top level. These concerns warrant review but do not outweigh the strong recent maintenance and release activity.
82%
Total Score
90
100
83
80
The artifact lacks a README, tests, and changelog, and the repository also lacks tests and a changelog; the repository README and GitHub Releases provide only partial documentation and release-history compensation.
There is only one open issue, with no issues or pull requests opened or closed in the last month; this indicates limited visible community activity but is not severe given the high commit and release activity.
The repository has zero stars, one fork, and zero watchers. This is weak supporting evidence, but popularity is not decisive and the strong activity signals compensate for the small audience.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap in the repository.
The repository has no security policy, reducing disclosure and maintenance transparency for security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
concrete5/core Version ^9.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.