Package Health

dklemmt/contao_dk_mmenu

The package has clear documentation, a changelog, and release notes for this version. Installation uses no lifecycle scripts, but the repository has no security policy and recent work comes from one contributor.

Latest 4.1.5PackagistPackagist

73%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Project backingcaution

The package and repository are owned by the same individual account, which supports source identity but provides less organizational maintenance depth than an organization-backed project.

Repo bus factorcaution

All recent commit activity came from one contributor, leaving maintenance dependent on a single active developer; the repository is user-owned rather than organization-backed.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current development activity is limited even though a recent release was published.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected, leaving automated coverage for dependency or code issues limited.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and expected security handling less transparent.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Dirk Klemmt
Fritz Michael Gschwantner

Direct Dependencies

DependencyLast ReleaseScore
doctrine/dbal
Version ^3.3 || ^4.0
—
—
symfony/finder
Version ^5.4 || ^6.0 || ^7.0
—
—
contao/core-bundle
Version ^4.13 || ^5.0
—
—
symfony/filesystem
Version ^5.4 || ^6.0 || ^7.0
—
—
symfony/http-kernel
Version ^5.4 || ^6.0 || ^7.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform