Usable with caveats: this is a small, clearly identified Contao extension with a stable release and no deprecation or install scripts. However, its last release and repository activity were over seven years ago, so compatibility and maintenance risk are significant.
55%
Total Score
50
78
75
The package is backed by a matching repository owned by an individual account rather than an organization. The source identity is clear, but the single-owner structure offers less continuity if that maintainer stops supporting it.
The package has only three releases and none in the last 12 months; its latest release was over seven years ago. This is strong evidence of stagnation, although the stable version history provides some maturity.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. This materially increases the risk that bugs or platform changes will not be addressed.
The repository has zero stars and forks and only one watcher, indicating little visible adoption or community support. Popularity is supporting evidence rather than decisive proof, so this is a modest concern.
Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a transparency gap, though it is less significant than the demonstrated maintenance stagnation for this small extension.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^3.5 || ~4.4 | — | — |
contao-community-alliance/composer-plugin Version ~2.4 || ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.