Pimcore Personalization Bundle
8%
Total Score
50
50
75
Packagist marks the entire package as abandoned, with no replacement declared. Package-wide deprecation is a direct warning against taking a new dependency.
There were no releases in the last 12 months, despite a historical median release interval of about 49 days. The recent release gap is consistent with the archived and abandoned status.
The repository had zero commits and zero active maintainers in the last 3 months, reinforcing the package-wide abandonment signal rather than showing ongoing maintenance.
The linked repository is archived, which strongly indicates that active maintenance has ended even though it was pushed recently. This is a severe abandonment risk for a framework integration.
The audit completed all 8 workflows with no reported findings and no untrusted checkout or script-injection paths. However, all 12 analyzed action references are unpinned, leaving a reproducibility and action-integrity gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
lcobucci/jwt Version ^4.0 || ^5.0 | — | — |
symfony/form Version ^6.2 | — | — |
geoip2/geoip2 Version ^2.9 | — | — |
mjaschen/phpgeo Version ^4.0 | — | — |
pimcore/pimcore Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.