The tiny user footprint offers little evidence of ongoing support. There is no documented security process, although the package is licensed and its repository matches the package.
38%
Total Score
100
100
67
75
The latest release was published in August 2018, and there have been no releases in the past eight years. Six releases were clustered on the original release day, leaving no evidence of continuing maintenance.
The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of a durable user or contributor community.
The repository is not archived, which preserves a path for maintenance, but its last push was in August 2018. That long period without repository activity is a substantial abandonment concern.
No security policy was found in the repository. For a package that integrates with an application, this reduces transparency about how vulnerabilities are reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimcore/core-version Version >=5.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.