Clear licensing, useful documentation, and a repository that matches the package improve transparency. Its narrow dependency set and lack of install-time scripts reduce integration friction.
64%
Total Score
50
100
88
83
The registry namespace and repository are owned by the same individual account, and the repository owner is a user rather than an organization; this provides no broader organizational backing to offset contributor concentration.
The package has existed since November 2014 with 56 releases, but only one release appeared in the last 12 months; the recent release shows it is not abandoned, while cadence is now low.
All one recent commit came from a single contributor, so maintenance depends heavily on one person and has limited demonstrated handoff capacity.
Only one commit was made in the last three months, showing some ongoing work but a slow maintenance pace.
There are eight open issues and four open pull requests, but no issues or pull requests were created, closed, or merged in the last month, indicating limited visible activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.4 || ^5.0 | — | — |
contao-community-alliance/composer-plugin Version ^2.4 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.