The package is licensed, documented, and has release notes for this version. Organization ownership and a recent repository update provide some continuity, but security coverage is limited and the project remains lightly evidenced.
62%
Total Score
67
79
83
The package is only 0 days old in the collected registry data, with all 3 releases published on the same day, so there is little evidence of an established release track.
All recent commit activity comes from one contributor. Organization ownership offers some handoff capacity, but no second active contributor is shown to reduce concentration risk.
The repository had 1 commit in the last 3 months, showing some recent maintenance but only limited activity.
The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly demonstrated by the source documentation.
Composer is used for builds, but no security-scanning tool was detected, leaving a meaningful security-process gap for a package integrated into Mautic.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mautic/core-lib Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.