Usable with caveats: the package is clearly backed by its matching organization repository and has a stable release, README, and MIT declaration. However, its latest release was over six years ago and there has been no recent commit activity, so ongoing compatibility and maintenance are uncertain.
58%
Total Score
67
100
81
83
The latest release was published in July 2020, over six years before this assessment, with no releases in the last 12 months. That long release gap is a meaningful maintenance concern despite the package's earlier release history.
The repository had zero commits and zero active maintainers during the last three months. Combined with the old latest release, this is the strongest evidence that maintenance has substantially slowed.
There are no open issues and four open pull requests, but none were merged or otherwise active during the last month. The unprocessed pull requests modestly increase uncertainty about project responsiveness.
The repository uses Composer build tooling, which fits this PHP package. No security scanning tool is configured, a transparency gap, but it is secondary to the observed maintenance history.
The linked repository is not archived, although it was last pushed in December 2022. Its unarchived status provides some continuity while the old last-push date reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^4.0.0 | — | — |
neos/nodetypes Version ^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.