Package Health

numero2/contao-proper-filenames

This is a mature, actively released Contao extension with a stable version, clear licensing, an organization-backed repository, and a source tree that matches the package and documents its use. The main concerns are that the repository recorded no commits or active maintainers in the last 3 months despite the recent release, and it has no tests, changelog, security policy, or security scanning; these reduce maintenance and transparency confidence but do not indicate that the package is unfit to use. Overall, it appears reasonable to depend on with normal version pinning and upgrade review.

Latest v2.3.0PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Package scaffoldingcaution

A substantive README documents requirements, installation, configuration, and commands, but neither the artifact nor repository contains tests or a changelog. For a small extension this is a real maintenance-transparency gap, though the documentation partly compensates.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the last 3 months. This is concerning given the otherwise recent release history, although the recent repository push provides some compensating freshness evidence.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. Composer provides appropriate packaging structure; the missing scanning is a modest transparency and security-process gap.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, but the absence is a caution rather than a severe adoption risk for this small package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

numero2 - Agentur für digitales Marketing GbR

Direct Dependencies

DependencyLast ReleaseScore
doctrine/dbal
Version ^3.7 || ^4.3
—
—
symfony/config
Version ^6.4 || ^7.4 || ^8.0
—
—
symfony/console
Version ^6.4 || ^7.4 || ^8.0
—
—
symfony/routing
Version ^6.4 || ^7.4 || ^8.0
—
—
contao/core-bundle
Version ^5.0 || ^6.0
—
—

Weekly Downloads

Info

Last Published
23 days ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform