Its repository lacks a security policy and automated security scanning, limiting transparency. The organization-backed project and stable, licensed release provide useful context despite the thin maintenance evidence.
63%
Total Score
75
88
75
The package has made no release in the last 12 months, and its latest release was about 17 months ago. Its long history and eight total releases provide some maturity, but the recent pause lowers confidence in ongoing maintenance.
The repository recorded no commits and no active maintainers in the last 3 months. This is a meaningful maintenance warning, although the package may be intentionally stable.
Composer is used as the build tool, but no security scanning tool is present. That modestly reduces supply-chain transparency without showing an immediate dependency risk.
The repository has no security policy. This leaves vulnerability-reporting and response expectations undocumented, reducing project transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
metamodels/attribute_translatedurl Version ^2.3 | — | — |
metamodels/attribute_translatedfile Version ^2.3 | — | — |
metamodels/attribute_translatedtext Version ^2.3 | — | — |
metamodels/attribute_translatedalias Version ^2.3 | — | — |
metamodels/attribute_translatedcheckbox Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.