Usable with caveats: the package is clearly backed by its matching organization repository and has a license, README, changelog, and release notes. However, it has had only one release and no commits for about 2 years 9 months, so ongoing maintenance is uncertain.
58%
Total Score
50
69
83
There were zero commits and zero active maintainers in the last 3 months, consistent with a repository that has received no updates for about 2 years 9 months.
Only one release was published, on December 4, 2023, with no releases in the following 12 months; this leaves little evidence of sustained maintenance.
The repository has zero stars and zero forks, with six watchers. This is limited supporting evidence of adoption, but popularity alone is not decisive for a small bundle.
Composer is used for the build, but no security scanning tools are configured. For a small package this is a hygiene gap rather than evidence that the release is unsafe.
The matching source repository is not archived, which is a positive sign, but its last push was on December 4, 2023 and does not offset the inactivity shown by the commit signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.13 || ^5.0 | — | — |
heimrichhannot/contao-utils-bundle Version ^2.232 || ^3.0.0-beta | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.