The package is licensed, documented, and tied to a matching organization repository. Its tiny community and absent security policy add concern, while the registry has not published an update since 2015.
48%
Total Score
50
100
78
75
The latest release was published in November 2015, and there have been no releases in the last 12 months. This is a substantial maintenance and compatibility concern despite the package having three releases overall.
There were no commits and no active maintainers in the three months measured. Combined with the old registry release, this leaves little evidence of ongoing maintenance.
Four issues remain open, with no issues or pull requests created or closed in the last month. This suggests limited current project activity, though it is weaker evidence than the lack of recent commits.
The repository has two stars and no forks, indicating a very small user and contributor base. Low popularity is supporting evidence only, but it offers little evidence of broad maintenance capacity.
The repository uses Composer, appropriate for a Packagist package, but has no security scanning tools. The missing scanning is a modest transparency and maintenance concern rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core Version >=3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.