This is a usable, actively released package with a matching repository, MIT licensing, a coherent 24-file implementation, no registry deprecation, no install-time lifecycle scripts, and organization backing. However, commit activity shows no commits or active maintainers in the last 3 months despite a recent repository push, while the repository has only 1 star, no tests, no changelog, no security policy, and no security scanning tooling. The seven releases in the last 12 months are reassuring, but the thin operational and validation evidence warrants caution before adopting it as a critical dependency.
72%
Total Score
75
100
78
90
A README is present and describes installation and usage, but neither the artifact nor repository contains tests or a changelog. For a small bundle this is a meaningful maintenance and transparency gap.
There were 0 commits and 0 active maintainers in the last 3 months. Although the repository was pushed recently and release history is active, the absence of recent commit activity weakens evidence of ongoing development capacity.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a quiet small project, but it also provides no evidence of an active support channel.
The repository has only 1 star, 0 forks, and 1 watcher. Low popularity is not decisive for a small package, but it provides little external adoption or resilience evidence.
Composer build tooling is present, but no security scanning tools are configured. The build setup is appropriate, while security-process transparency is limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.