The linked project has tests, organization backing, and security scanning, while the repository remains active rather than archived. Its workflow uses six unpinned actions and lacks a security policy.
62%
Total Score
67
94
50
The package has 16 releases over more than 13 years, but none in the last 12 months; the latest release was about 18 months ago, indicating slowed maintenance.
The repository had zero commits and zero active maintainers in the last 3 months, reinforcing the release-history evidence of a maintenance pause.
There is only one open issue and no issues or pull requests were opened or closed in the last month, providing little evidence of current community activity.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package integrated into applications.
The only workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all six action references are unpinned and a high-confidence condition always evaluates true.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.6.0 | — | — |
symfony/config Version ^5.4 | — | — |
metamodels/core Version ^2.3 | — | — |
symfony/routing Version ^5.4 | — | — |
contao/core-bundle Version ^4.13.0 <5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.