Usable with caveats: the package is clearly backed by the matching organization repository, has a readable package and build/security tooling, and is not deprecated. However, the last registry release was over two years ago, recent repository activity is inactive, and the dependency surface is relatively large.
60%
Total Score
75
50
89
80
The release declares 21 runtime dependencies, including Contao, MetaModels, Symfony, and Leaflet components; this creates meaningful compatibility and maintenance exposure for consumers.
The package has a long history with 17 releases, but its latest registry release was January 23, 2024—over two years before the assessment—with no releases in the last 12 months.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently inactive development and increased abandonment risk.
There are two open issues and three open pull requests, but no issues or pull requests were created or merged in the last month, suggesting limited current responsiveness.
The repository has only 1 star and 10 forks, indicating limited visible adoption. Popularity is supporting evidence rather than a decisive health measure, especially for a focused CMS extension.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.11 || ^3.3 | — | — |
symfony/config Version ^4.4 || ^5.4 | — | — |
metamodels/core Version ^2.2 | — | — |
symfony/routing Version ^4.4 || ^5.4 | — | — |
contao/core-bundle Version ^4.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.