The organization-backed repository is current, but it has had no commits or active maintainers in the last three months. The README warns that Smarty is unsupported from OXID eShop 7.1 onward, and the declared GPL-3.0 conflicts with the detected AGPL-3.0 license.
58%
Total Score
75
75
83
The artifact includes a README explaining installation and limitations. Its explicit warning that Smarty is unsupported from OXID eShop 7.1 onward is a material compatibility concern for this release.
A license file is present, but the manifest declares GPL-3.0 while the artifact license file is detected as AGPL-3.0; that mismatch creates avoidable legal uncertainty.
There were no commits and no active maintainers in the last three months, which suggests limited current maintenance capacity despite the recent release.
Composer is used as the build tool, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The linked repository has no security policy, so vulnerability reporting and response expectations are not documented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.1.4 | — | — |
psr/cache Version ~3.0.0 | — | — |
twig/twig Version ~v3.21.1 | — | — |
symfony/lock Version ~v6.4.26 | — | — |
symfony/mime Version ~v6.4.26 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.