Usable with caveats: the repository is active, clearly tied to the package, and the release is documented and licensed. Maintenance is thin, with only one commit from one contributor in the last three months and no security policy.
72%
Total Score
63
50
81
67
The 17 runtime dependencies are substantial for a CMS extension and increase compatibility and update surface, but they are coherent with its Contao and Symfony integration.
The package has existed for about 7 years with 17 releases, but only one release was published in the last 12 months, indicating a slow recent cadence.
All recent commits come from one contributor, creating a fragile maintainer base; organization backing provides some capacity to hand maintenance off, but no second recent contributor is shown.
The repository has one commit from one active maintainer in the last three months, showing recent maintenance but a very limited current pace.
There are only two open issues, no open pull requests, and no issue or pull-request activity in the last month; this is a modest sign of limited community activity rather than a severe abandonment signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.4 || ^7.4 || ^8.0 | — | — |
doctrine/dbal Version ^3.10 || ^4.4 | — | — |
symfony/config Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/console Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/routing Version ^6.4 || ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.