A single contributor carries all recent commits, and the workflow leaves all six actions unpinned. The package has strong release activity, tests, a substantial README, and a matching repository, but it lacks a security policy.
68%
Total Score
63
50
100
67
Ten runtime dependencies create meaningful dependency surface for a CMS extension, but the profile is not unusually broad for the documented feature set.
The repository is owned by an individual rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
One contributor made all 29 recent commits, so maintenance depends entirely on a single person and could stop if that contributor becomes unavailable.
There are nine open issues and no issue or pull-request activity in the last month. This is a modest maintenance warning, though recent commits and releases provide compensating evidence.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.0 || ^4.0 | — | — |
symfony/lock Version ^6.4 || ^7.1 | — | — |
contao/core-bundle Version ^5.3 | — | — |
codefog/contao-haste Version ^5.0 | — | — |
symfony/rate-limiter Version ^6.4 || ^7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.