Documentation and tests make integration clearer, while organizational ownership provides some continuity beyond the current contributor. Pin the reviewed version and monitor maintenance if the project becomes business-critical.
78%
Total Score
83
100
50
One contributor made all 11 commits in the last 3 months, creating a concentrated maintenance risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.
No security policy was found in the repository. This is a transparency and reporting-process gap, but it is not by itself evidence that the package is unsafe.
The single workflow was fully analyzed with no audit findings and no untrusted checkout or script-injection paths. However, all 3 action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/seo Version ^3.2 | — | — |
neos/neos Version ~8.4 || dev-master | — | — |
guzzlehttp/psr7 Version ^2.4 | — | — |
symfony/dom-crawler Version ^5.4 || ^6.0 | — | — |
symfony/css-selector Version ^5.4 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.