The package has a clear README, changelog, stable major release, and organization backing. Recent release activity is healthy, but no commits were recorded in the last three months and the repository has no security policy or scanning tools.
70%
Total Score
75
50
93
75
The package declares 12 runtime dependencies, including the Contao and Nutshell ecosystems. This is a meaningful integration surface, but the dependency list is coherent for a full theme bundle rather than inherently excessive.
No commits or active maintainers were recorded in the last three months. Although the package was released recently, the missing underlying commit activity weakens evidence of ongoing source maintenance.
Composer is used for the build, which fits the package ecosystem. No security scanning tools are configured, leaving a modest repository hygiene gap.
The repository has no security policy. This reduces transparency around vulnerability reporting, though it is not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^5.7 | — | — |
symfony/http-kernel Version ^6.0 || ^7.0 | — | — |
contao/manager-plugin Version ^2.0 | — | — |
nutshell-framework/nutshell Version ^2.0 | — | — |
erdmannfreunde/theme-toolbox Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.