This is a small but currently active and plausibly maintainable package: it has a stable 1.1.0 release, seven releases over its 83-day history, a matching organization-owned repository, recent repository activity, a clear README, and a modest dependency profile. The main concerns are limited maturity evidence—no tests or changelog, zero popularity metrics, one open issue with no issues closed in the last month, and no security policy or security scanning—so it is usable but should be adopted with normal review and monitoring rather than treated as a highly mature dependency.
72%
Total Score
83
100
78
90
A README and GitHub Releases are present, but neither the artifact nor repository contains tests or a changelog. For a package only 83 days old this is a meaningful transparency and maintenance gap, though releases provide some compensating project activity.
Seven releases in the first 83 days show active initial development, but the short history provides little evidence of long-term maintenance.
There is one open issue, one new issue in the last month, and no issues or pull requests closed or merged in that period. This is a limited activity sample, but it does not demonstrate a responsive issue-management process.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any community adoption lowers confidence in maturity and external validation.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning reduces supply-chain assurance without making the package unfit by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/conflicts Version @dev | — | — |
contao/core-bundle Version ^5.3 || ^5.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.