The package has seen no commits or releases since November 2015, and its 45-character README offers little guidance. Organization backing, a matching repository, and a single runtime dependency provide some traceability but do not offset the abandonment risk.
38%
Total Score
50
100
67
50
There has been only one release, published more than 10 years ago, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but that does not demonstrate current maintenance.
A README is present, but it contains only 45 characters and provides minimal usage information. The absence of tests and a changelog is normal for a published artifact and is not itself a gap.
Composer is used as the build tool, which is appropriate for this package, but no security-scanning tools are present. The missing scanning is a modest hygiene gap rather than a standalone adoption blocker.
The linked repository has no security policy, leaving no documented route for reporting vulnerabilities. This adds a transparency concern, especially for a package whose maintenance activity has stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core Version >=3.2,<4-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.