The package includes a clear README, matching source repository, tests in the project, and a proper license. Its small audience, absent security policy, and workflow hygiene reduce confidence for long-term maintenance.
54%
Total Score
50
100
81
75
There were no commits and no active maintainers in the last three months, reinforcing the roughly 14-month release gap and creating abandonment risk.
The package has six releases, but none in the last 12 months and the latest release was about 14 months ago, indicating a substantial maintenance pause.
There are no open issues or pull requests and no recent issue or pull-request activity; this is consistent with a quiet project but provides no evidence of active support.
The repository has one star, no forks, and three watchers, showing limited external adoption and reducing supporting evidence for sustained maintenance.
Composer and Phing provide build tooling, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
metamodels/core Version ^2.3 | — | — |
contao/core-bundle Version ^4.13.0 <5.0 | — | — |
symfony/http-kernel Version ^5.4 | — | — |
symfony/translation Version ^5.4 | — | — |
symfony/http-foundation Version ^5.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.