The repository has no security policy and shows little community activity, while the small dependency set and clear README help. Pinning this release carries substantial maintenance risk because the project has not changed in nearly 12 years.
42%
Total Score
0
100
78
83
The package has had only two releases, both in June 2014, with no release in nearly 12 years. That strongly indicates abandonment despite the stable version being clearly identified.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
The repository has zero stars and forks and only one watcher, providing little evidence of adoption or community support. Popularity is supporting evidence rather than a verdict, but it does not offset the inactivity.
The repository uses Composer, which provides basic build and dependency tooling. No security-scanning tools are configured, leaving a modest hygiene gap.
The linked repository has no security policy, reducing transparency about how vulnerabilities would be reported and handled. The absence is more concerning alongside the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core Version >=3.0,<3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.