It has a stable version, a clear README, a declared license, and no install scripts. Two runtime dependencies keep the package simple, but limited repository security hygiene adds ongoing uncertainty.
57%
Total Score
50
100
78
75
The package has only 6 releases across roughly 12 years, with no releases in the last 12 months and a median interval of about 2 years 4 months. This indicates slow maintenance, though the May 2024 release is relatively recent.
There were no commits and no active maintainers in the last 3 months. Combined with the older latest release, this is evidence of limited current maintenance.
The repository name does not match the package name and its README does not mention the package. That makes package-to-source ownership less clear, even though the owner organization matches the registry namespace.
The repository has 2 stars and 1 fork, providing little external evidence of adoption or review. Low popularity is supporting evidence rather than a health verdict by itself.
The repository uses Composer, but no security-scanning tools were detected. Build tooling is present, while automated security coverage is limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^4.0 || ^5.0 || ^7.0 | — | — |
neos/nodetypes Version ^4.0 || ^5.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.