Clear documentation, repository tests, and release notes improve confidence for adoption. The single maintainer and absent security policy leave limited evidence for long-term support, while workflow references are not pinned.
65%
Total Score
50
100
81
75
One registry maintainer means publishing responsibility is concentrated in a single person, which increases continuity risk for a new package.
The registry namespace and repository are owned by the same individual account. This confirms ownership alignment, but it does not provide organizational backing.
This package is 103 days old and has only one release, so there is not yet enough release history to demonstrate sustained maintenance.
There were no commits and no active maintainers in the last three months. Because the package is only 103 days old, this may reflect a completed initial release, but it leaves follow-up maintenance unproven.
The repository has one star, no forks, and no watchers. Low popularity is only supporting evidence, but it provides little external evidence of adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.13 || ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.