The package has a clear license, repository tests, organization backing, and no deprecation or install-time scripts. Releases and commits have stopped for about 18 months, while all six workflow actions are unpinned and the workflow contains a high-confidence condition error.
58%
Total Score
75
100
89
67
The package has 16 releases since 2013, but none in the last 12 months; the latest release was about 18 months ago. This indicates materially slowed maintenance despite its long history.
There were zero commits and zero active maintainers in the last three months, consistent with the broader release slowdown and increasing abandonment risk.
There has been no issue or pull-request activity in the last month, with one open issue. This is a modest maintenance concern but not evidence of abandonment by itself.
The repository has three stars and five forks, indicating a small user base. Popularity is supporting evidence only, so this does not materially outweigh the maintenance signals.
The repository has no security policy. This weakens vulnerability-reporting transparency, though the organization backing and Dependabot provide some compensating maintenance structure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
metamodels/core Version ^2.3 | — | — |
contao/core-bundle Version ^4.13.0 <5.0 | — | — |
symfony/http-kernel Version ^5.4 | — | — |
symfony/dependency-injection Version ^5.4 | — | — |
contao-community-alliance/dc-general Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.