The package includes tests, a README, and a small dependency set, while its organization backing and non-deprecated status provide some reassurance. There has been no release or commit activity for nearly 11 years, and no security policy is published.
40%
Total Score
67
100
72
83
The latest release was nearly 11 years ago, with no releases in the last 12 months. Nineteen historical releases show prior maintenance, but the long current gap indicates abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with the repository's last push nearly 11 years ago. This is strong evidence that maintenance capacity has collapsed.
The repository has zero stars, forks, and watchers, offering no community adoption evidence. Popularity is supporting evidence rather than a verdict, so this adds only a modest concern.
Composer and Phing build tooling are present, showing a defined build process. No security scanning tools are configured, which leaves a modest transparency and maintenance gap.
The repository is not marked archived, but it was last pushed nearly 11 years ago. The unarchived status offers limited reassurance against the stronger evidence of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core Version >=3.2,<3.6-dev | — | — |
pimple/pimple Version ~1.0 | — | — |
contao-community-alliance/composer-plugin Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.