erdmannfreunde/contao-grid-bundle
Its small dependency set and clear README make integration straightforward. The organization-backed repository is active in releases, but no commits were recorded in the last three months and the MIT declaration conflicts with the detected GPL-3.0 license.
64%
Total Score
50
100
92
75
Health Score Breakdown
The artifact includes a license file and the repository also has one, but the manifest declares MIT while the detected license is GPL-3.0. That mismatch creates a real adoption and compliance concern.
The repository recorded zero commits and zero active maintainers in the last three months. Recent releases partly compensate for this, but the lack of development activity raises maintenance risk.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it does not by itself show that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Erdmann & Freunde |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^6.4 || ^7.0 | — | — |
contao/core-bundle Version ^5.0 | — | — |
symfony/http-kernel Version ^6.4 || ^7.0 | — | — |
symfony/dependency-injection Version ^6.4 || ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.