Package Health/heimrichhannot/contao-bootstrapper

heimrichhannot/contao-bootstrapper

The release is documented and tested, with an organization-backed repository and no install-time scripts. Its licensing evidence conflicts, and the project shows little recent maintenance or security-process coverage.

Latest 3.2.8-beta3

Packagist

42%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in September 2020, with no releases in the last 12 months despite 275 historical releases. This long silence materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap. The repository is not archived, but it is not showing current maintenance.

Dependency profile

The package declares 13 runtime dependencies, including framework components and frontend libraries. This is a broad dependency surface that increases maintenance exposure, although no dependency-specific failure is shown.

License

The manifest declares LGPL-3.0-or-later and the artifact contains license files, but the detected license is MIT. The conflicting evidence needs clarification before adoption, even though licensing material is present.

Security policy

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a package with many runtime dependencies.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Heimrich & Hannot

Direct Dependencies

Dependency	Last Release	Score
contao/core-bundle Version ^3.5.1 \|\| ~4.1	—	—
heimrichhannot/bootstrap Version ^4.0.0	—	—
heimrichhannot/font-awesome Version >=4.4,<5-dev	—	—
heimrichhannot/elegant-icons Version ^1.1	—	—
heimrichhannot/bootstrap-select Version ^1.12.3	—	—