contao-community-alliance/composer
The README, changelog, and declared LGPLv3 license provide useful consumer context. Its small dependency surface and lack of install-time scripts reduce exposure, but they cannot offset the project's end-of-life state.
8%
Total Score
0
100
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned and names contao-community-alliance/composer-client as the replacement. This is a direct indication that this package should no longer be adopted.
The package has 63 historical releases, but its latest release was July 30, 2014 and it had no releases in the last 12 months. Its earlier release activity does not compensate for more than a decade without a release.
The repository recorded zero commits and zero active maintainers in the last 3 months. Together with the archived status and old latest release, this indicates no ongoing maintenance.
The linked repository is archived, with its last push on September 6, 2014. An archived source project is a severe abandonment risk for a dependency.
The repository has no security policy. This is a transparency gap, though the archived and abandoned state is the more consequential concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tristan Lins |
| Christian Schiffler |
| Dominik Zogg |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 contao/core Version >=2.11 | — | — |
contao-community-alliance/composer-plugin Version ~2.2 | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.