Recent commits from four contributors show active maintenance, with security tooling and a policy in place. That current support does not offset the limited future path for adopters.
22%
Total Score
100
71
100
The release includes a README and release notes, but those notes explicitly state that the bundle will be deprecated with 7.1 because it will not migrate to Pimcore Studio.
The registry does not mark the package deprecated, but that does not compensate for the project's explicit release-note statement that this bundle is being deprecated.
The package has a long history with 95 releases, but only one release in the last 12 months, suggesting a slowing cadence that reinforces the deprecation concern.
All nine workflows were analyzed with no reported audit findings or untrusted checkout and script-injection paths. However, all 11 action references are unpinned, a reproducibility and workflow supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.2 || ^4.0 | — | — |
pimcore/pimcore Version ^12.3 | — | — |
pimcore/opensearch-client Version ^2.0 | — | — |
pimcore/elasticsearch-client Version ^2.0 | — | — |
handcraftedinthealps/elasticsearch-dsl Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.