The small scope and single runtime dependency keep integration straightforward. Limited activity and missing project security documentation leave less evidence for long-term maintenance, despite current organizational backing.
67%
Total Score
67
100
79
50
The package has existed since 2020 and received one release in the last 12 months, but only five releases overall with a median interval of about 22 months indicate a slow cadence.
All one recent commit came from a single contributor, creating a concentrated maintenance risk; organization ownership provides some handoff capacity but does not remove the concentration.
One commit was recorded in the last three months, showing some recent activity but only limited evidence of sustained maintenance.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users have no documented reporting path or security-maintenance expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.4 || ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.