postyou/contao-venobox-bundle
The small, organization-backed project has a clear README and no install-time scripts. Its documentation labels the extension deprecated, and the source has seen no recent activity, so maintenance risk remains high.
38%
Total Score
50
75
75
Health Score Breakdown
The latest release was in February 2022, with no releases in the last 12 months. This indicates prolonged release inactivity for a package consumers may still depend on.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with an effectively inactive project and elevated abandonment risk.
The package includes a readable README, but that README explicitly labels the extension deprecated and contains no tests or changelog. Missing tests and changelog are normal for a published artifact; the deprecation notice is the material concern.
Composer is used as a build tool, but no security-scanning tooling was detected. The missing scanning is a modest transparency and maintenance gap, not proof of a defect.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap alongside the inactivity evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mario Gienapp |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 contao/core-bundle Version ^4.4 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.