contao-community-alliance/dc-general
Clear documentation, a long release history, and active recent work support dependable maintenance. The project has automated dependency scanning, but most recent commits come from one contributor and workflow actions are unpinned.
82%
Total Score
88
100
100
50
Health Score Breakdown
Two contributors were active, but one made about 96% of the 157 recent commits. The organization backing provides some handoff capacity, yet the current activity remains highly concentrated and is a maintenance-risk caveat.
The repository has no published security policy. That is a transparency gap for a framework component, although active maintenance and Dependabot provide partial compensating evidence.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 6 action references are unpinned, which leaves the workflow exposed to mutable action changes and is a hygiene caveat.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christian Schiffler |
| Stefan Heimes |
| Ingolf Steinhardt |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
twig/twig Version ^3.21 | — | — |
contao/image Version ^1.2 | — | — |
doctrine/dbal Version ^3.7 || ^4.3 | — | — |
symfony/cache Version ^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.