Downloads by Token
62%
Total Score
38
100
83
90
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the long interval since the latest release, this is the main abandonment-risk signal.
Only one account has registry publishing access. For a user-owned project this is a meaningful resilience concern because release continuity depends on a single publisher, despite the matching repository ownership.
The registry namespace and repository owner are the same individual account, so the package has direct ownership alignment. It is not organization-backed, which limits visible institutional continuity.
The package has five releases over roughly 17 months, including three in the last year, but its releases appear clustered and the latest release was about 10 months ago. This suggests usable but not especially active maintenance.
There is one open issue, with no issues or pull requests opened or closed in the last month. This shows little recent community or maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.