The matching repository and stable release make the package easier to trust, while its small dependency footprint avoids extra exposure. Security documentation is limited, leaving incident reporting expectations unclear.
67%
Total Score
67
100
88
83
The package has only four releases since May 2022, with a median interval of about 19 months and one release in the last year. Recent publication exists, but the long cadence lowers confidence in ongoing maintenance.
All three recent commits came from one contributor, concentrating maintenance responsibility. Organization ownership provides some handoff capacity, so this is not a severe risk.
Three commits were made in the last three months, showing current activity, but the volume is modest and does not fully offset the slow release cadence.
The project uses Composer, but no security scanning tool was detected. The build tooling is present while automated security oversight is limited.
The repository has no security policy, so reporting and response expectations for vulnerabilities are not documented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
openpsa/midcom-core Version ^9.11.0 | — | — |
openpsa/net-nemein-tag Version ^9.11.0 | — | — |
openpsa/org-openpsa-widgets Version ^9.11.0 | — | — |
openpsa/org-openpsa-relatedto Version ^9.11.0 | — | — |
openpsa/org-openpsa-notifications Version ^9.11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.