Documentation, release notes, and repository tests make the implementation easier to evaluate. The MIT license, matching repository, and recent commits provide useful support, though the project has little operating history.
65%
Total Score
63
100
88
75
Only one registry account has publish access. That is a real continuity concern for a user-owned project, although repository activity shows the account is currently active.
The package and repository are owned by the same individual user rather than an organization, so there is no visible organizational handoff capacity to offset the concentrated maintainer base.
The package is only 2 days old with two releases, so there is not enough history to establish long-term maintenance or stability.
One contributor made all 14 recent commits, leaving no demonstrated backup maintainer and increasing continuity risk.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and monitoring gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.7 || ^4.3 | — | — |
symfony/config Version ^6.4 || ^7.0 | — | — |
symfony/console Version ^6.4 || ^7.0 | — | — |
symfony/routing Version ^6.4 || ^7.0 | — | — |
contao/core-bundle Version ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.