The release includes clear documentation, release notes, and a stable package layout. Do not adopt it; use contao/contao-demo instead.
15%
Total Score
25
50
100
Packagist marks the entire package as abandoned and names contao/contao-demo as its replacement, which directly indicates that this dependency should not be newly adopted.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the abandonment signal rather than compensating for it.
The linked Contao organization repository is archived, despite being pushed in January 2024; archived source means ongoing maintenance should not be expected.
The repository is owned by the Contao organization, which supports clear project ownership, but organization backing does not compensate for the package being abandoned and archived.
The package has 20 releases over more than 11 years but none in the last 12 months; this historical maturity cannot offset its current abandonment indicators.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ~4.13.12 | — | — |
contao-community-alliance/composer-plugin Version ~3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.