Payment method "Purchase Order" accepts a PO# as guarantee of payment.
18%
Total Score
critical
Unfit to use: the package is deprecated and has had no release for about nine years.
Packagist marks the entire package as abandoned, with no replacement listed. Package-level deprecation is a severe adoption risk because future maintenance and compatibility are not expected.
The package has 8 releases, but the latest was about nine years ago and there were no releases in the last 12 months. This strongly indicates abandonment risk.
A license file is present, so the release is licensed, but it declares LGPL-3.0+ while the detected file identifies MIT. That mismatch reduces licensing clarity for adopters.
The package includes a README, but it is only 24 characters and contains no useful usage guidance; no tests or changelog are expected in the published artifact. The limited consumer documentation is a minor transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core Version >=3.3.0,<4.0.0-dev | — | — |
isotope/isotope-core Version ~2.3 | — | — |
terminal42/contao-namespace-class-loader Version ~1.0 | — | — |
contao-community-alliance/composer-plugin Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.