The stable release history and complete source tree support practical use. Maintenance has slowed, and the project lacks security documentation and automated tests, so future fixes may be limited.
61%
Total Score
50
100
75
83
Only one registry publisher is listed, so publishing continuity depends on a single person. This is a real resilience concern, though the linked repository is also owned by that user.
The package includes a GitHub release with notes for this version, providing some release transparency. No tests or changelog are published, but those are normal omissions for packaged artifacts; the missing README is a minor integration gap for a Contao extension.
The registry namespace and repository owner match, and the owner is an individual rather than an organization, making the single-person maintenance concern more relevant.
The package has 34 releases since January 2021, but none in the last 12 months; its latest release was about 18 months ago, indicating stalled maintenance.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the release-history evidence of limited current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
patchwork/utf8 Version ^1.3 | — | — |
contao/core-bundle Version ~4.13 | — | — |
symfony/http-client Version ~5.4 | — | — |
contao-community-alliance/composer-plugin Version ~3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.