Usable with caveats: this is a stable, small Contao component with clear repository ownership and no deprecation or install-time script concerns. However, it has had no release or commit activity for about 2 years, and the repository has limited security and testing evidence.
67%
Total Score
83
100
83
83
The project has a long history with 16 releases, but it has made no release in about 2 years, which lowers confidence that future fixes will arrive promptly.
There have been no commits and no active maintainers in the last 3 months, consistent with the lack of releases for about 2 years and indicating a real maintenance risk.
The repository has 5 stars and no forks, indicating limited external adoption; this is supporting caution rather than a decisive health problem for a small Contao component.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency gap.
No security policy was found, which makes vulnerability reporting less transparent, although the package's small scope and lack of workflow automation limit the significance of this gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao-components/installer Version ^1.0.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.