pimcore/quill-bundle
Active development and a broad organization-backed maintainer base reduce abandonment risk. Workflow references are all unpinned, and the package is deprecated for future platform releases, so new projects should choose the named replacement.
58%
Total Score
100
94
83
Health Score Breakdown
Packagist marks the package abandoned and names pimcore/pimcore-wysiwyg-editor as its replacement. The release remains supported in the 2026.x LTS, so this is a meaningful forward-compatibility concern rather than immediate unfitness.
All 12 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, or other concrete findings; two workflows have top-level write permissions, a mild additional concern without an observed untrusted sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pimcore/pimcore Version ^2026.1 | — | — |
pimcore/studio-ui-bundle Version ^2026.2.1 | — | — |
pimcore/studio-backend-bundle Version ^2026.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.