The package is licensed, documented, and has a small runtime dependency set. Maintenance appears abandoned after roughly five years without a release, and the repository has no security policy.
42%
Total Score
100
81
50
The latest release was on July 1, 2021, and there have been no releases in the last 12 months. This long period without published updates is a substantial abandonment concern.
Composer is used for the build, but no security-scanning tool is reported. This is a transparency and maintenance-hygiene gap rather than evidence that the release is unsafe.
The linked repository has no security policy. For a package exposing a web API, the absence of documented vulnerability reporting and handling lowers transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.