This bundle enhances the support of list and reader bundle for the contao news entity.
62%
Total Score
caution
Usable with caveats: no release or commit activity since March 2025 raises maintenance risk.
The package has 24 releases over nearly seven years, but none in the last 12 months; the latest release was in March 2025. This is a meaningful maintenance concern for a dependency, though the established release history provides some maturity evidence.
There were no commits and no active maintainers in the last three months, consistent with the last release being in March 2025. This raises the risk that defects or compatibility changes will not be addressed promptly.
Composer is used for builds, but no security-scanning tooling is configured. The missing automated security check is a moderate process gap, although it does not by itself indicate unsafe code.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This reduces transparency for a package used in application deployments.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.13.46 | — | — |
contao/news-bundle Version ^4.13 | — | — |
symfony/event-dispatcher Version ^4.4 || ^5.4 | — | — |
heimrichhannot/contao-head-bundle Version ^1.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.