The small repository has no tests, changelog, or security scanning, which limits confidence in ongoing maintenance. It is licensed, non-deprecated, organization-backed, and has no install-time scripts.
52%
Total Score
50
100
75
75
There were 0 commits and 0 active maintainers in the last 3 months, consistent with the latest push being nearly three years ago. This is the strongest evidence of stalled maintenance.
The package includes a README, while its missing tests and changelog are normal for published artifacts and therefore do not count as gaps here. The repository also reports no tests or changelog, limiting project transparency.
The package has only 5 releases over about 12 years, with no release in the last 12 months and a median interval of about 823 days. This sparse cadence makes timely maintenance unlikely.
The repository has 2 stars, 1 fork, and 6 watchers, indicating a very small adoption and review community. Low popularity is supporting evidence rather than a health verdict on its own.
Composer is used as the build tool, but no security scanning tool is configured. The missing scanning is a modest transparency and maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.