The project has no security policy and no automated security scanning, leaving limited transparency around maintenance practices. Its README and organization backing provide useful context, but they do not offset the long period without a new release.
45%
Total Score
75
100
72
75
The package has had no releases in more than 6 years, with the latest release on June 29, 2020; this is strong evidence of stalled maintenance despite six total releases.
There have been no new issues, pull requests, or merges in the last month; this is consistent with an inactive project, although the lack of open issues is not itself a health concern.
The repository has zero stars and forks and only seven watchers, offering little community evidence to compensate for the absence of recent maintenance activity.
Composer is used for builds, but no security-scanning tooling is present, leaving a maintenance and transparency gap alongside the stale release history.
The repository is not archived, which is a positive, but it was last pushed on June 29, 2020, reinforcing the long period of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^3.4|^4.1 | — | — |
contao-community-alliance/composer-plugin Version ~2.4 || ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.