Package Health

heimrichhannot/contao-frontend-framework-bundle

Usable with caveats: the package is clearly backed by its matching organization repository and has a license, README, changelog, and release notes. However, it has had only one release and no commits for about 2 years 9 months, so ongoing maintenance is uncertain.

Latest 0.1.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, consistent with a repository that has received no updates for about 2 years 9 months.

Release historycaution

Only one release was published, on December 4, 2023, with no releases in the following 12 months; this leaves little evidence of sustained maintenance.

Repo popularitycaution

The repository has zero stars and zero forks, with six watchers. This is limited supporting evidence of adoption, but popularity alone is not decisive for a small bundle.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. For a small package this is a hygiene gap rather than evidence that the release is unsafe.

Repository archivedcaution

The matching source repository is not archived, which is a positive sign, but its last push was on December 4, 2023 and does not offset the inactivity shown by the commit signal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Heimrich & Hannot

Direct Dependencies

DependencyLast ReleaseScore
contao/core-bundle
Version ^4.13 || ^5.0
heimrichhannot/contao-utils-bundle
Version ^2.232 || ^3.0.0-beta

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform