e-spin/contao-backend-size-bundle
This is a healthy-looking but very young package release. It has a clear LGPL license, README and tests in both the artifact and repository, a coherent 25-file source tree, stable versioning, no registry deprecation, no install-time lifecycle scripts, and recent release and commit activity from two contributors. The main concerns are the package's short 21-day history, low repository adoption, highly concentrated commit activity (8 of 9 commits from one contributor), and the absence of a security policy or security-scanning tooling. These issues warrant monitoring, but the active repository, matching package reference, and concrete test coverage make the package reasonable to depend on with normal review of future updates.
78%
Total Score
63
100
83
90
Health Score Breakdown
Only one registry account, e-spin, has publish access. This is a modest publishing bus-factor concern, although repository activity shows a second active contributor and the repository owner matches the package identity.
The repository is owned by the user account e-spin rather than an organization, so there is no organizational maintenance buffer to offset the concentrated contributor activity.
The package is only 21 days old with 5 releases, including releases in the last 12 months and a median interval of about 1 day. This shows active early development but leaves little evidence of long-term stability.
Two contributors are active, but one accounts for 8 of 9 recent commits, so maintenance is materially concentrated. The second contributor provides some mitigation, but not enough to remove the concern.
The repository has 1 star, 0 forks, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these low counters provide little external validation for a very new package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 e-spin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.21 | — | — |
symfony/config Version ^7.4 || ^8.0 | — | — |
contao/core-bundle Version ^5.7 || ^6.0 | — | — |
symfony/http-kernel Version ^7.4 || ^8.0 | — | — |
symfony/security-bundle Version ^7.4 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 27 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.