Index Now Bundle for Sulu CMS
72%
Total Score
70
100
83
80
Only one registry account has publish access. This is a modest publishing-continuity concern, although repository activity confirms that the named maintainer is actively contributing.
The repository owner is an individual user rather than an organization, so the package lacks demonstrated organizational backing; this reinforces the continuity concern from the single-contributor signal.
All 4 commits in the last 3 months came from one contributor, creating a genuine continuity and bus-factor risk. The repository is user-owned rather than organization-backed, so there is no provided organizational backing to offset that concentration.
The repository has only 1 star, 0 forks, and 0 watchers. Low popularity is supporting evidence rather than a verdict, but it provides little external adoption signal for this young package.
Composer is used as a build tool, but no security-scanning tools were detected. The missing scanning layer is a supply-chain hygiene gap, though it does not by itself establish poor package health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sulu/sulu Version ^3.0.8 | — | — |
symfony/intl Version ^6.2 | ^7.0 | — | — |
symfony/config Version ^6.2 | ^7.0 | — | — |
symfony/http-client Version ^6.2 | ^7.0 | — | — |
symfony/http-kernel Version ^6.2 | ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.