contao-bootstrap/core
The package is clearly documented and has a long release history, with recent publishing and an active organization behind it. Maintenance is currently concentrated in one contributor, and the repository's five action references are all unpinned.
72%
Total Score
67
100
83
Health Score Breakdown
One contributor made all recent commits, concentrating current maintenance in a single person; organization ownership provides some handoff capacity but does not remove the present concentration.
Only two commits were recorded in the last three months, showing limited recent development even though the repository was pushed recently.
No security policy was found, leaving reporting and response expectations undocumented for a package that integrates deeply with an application framework.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all five action references are unpinned, weakening build reproducibility and action supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Molineus |
| Alexander Kehr |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.1 | — | — |
symfony/yaml Version ^6.4 || ^7.4 | — | — |
doctrine/dbal Version ^3.9 || ^4.0 | — | — |
symfony/config Version ^6.4 || ^7.4 | — | — |
symfony/routing Version ^6.4 || ^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.