heimrichhannot/contao-listgrid
The source repository is still present and correctly matches the package, and the release has a declared LGPL license with only one runtime dependency. However, there is no security policy or scanning, and the project shows little evidence of continued care.
42%
Total Score
100
58
50
Health Score Breakdown
The package has had only two releases, with the latest published about 10 years ago and none in the past 12 months. This is strong evidence of abandonment risk for a dependency.
The repository has zero stars and zero forks, with only four watchers. Popularity is not decisive, but these counters provide no supporting evidence of an active user or contributor community.
Composer is used for project builds, which is appropriate for a Packagist package, but no security-scanning tools are configured. This is a modest transparency and maintenance weakness.
The repository is not archived, which preserves a path for maintenance, but its last push was also about 10 years ago. The repository status does not offset the long inactivity.
The repository has no security policy. For an old package with no recent maintenance evidence, this leaves vulnerability-reporting and response practices unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Heimrich & Hannot |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 contao/core Version >=3.4,<4-dev | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.