The repository is current and the release includes notes. Organization ownership, a clear README, and security scanning provide useful support despite the narrow maintenance base.
70%
Total Score
67
100
94
67
The package has three releases over about 21 months, with only one release in the last year and a median interval of about 10 months. The recent release shows the project is not abandoned, but ongoing maintenance is light.
All recent commits come from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown to offset the concentration.
Only one commit was recorded in the last three months, with one active maintainer. Recent activity exists, but the observed maintenance pace is thin.
No repository security policy was found, leaving reporting and response expectations undocumented. This is a transparency gap, though not a standalone adoption blocker.
The single workflow was fully analyzed with no reported audit findings or dangerous triggers, but all four action references are unpinned. That leaves the CI supply chain less reproducible than it could be.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sulu/sulu Version ^2.6 | — | — |
pixelmairie/sulu-townhallbundle Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.