schachbulle/contao-chesstable-bundle
This is a healthy, actively maintained release with a long history since 2019, 27 releases, 10 releases in the last 12 months, and a recent stable 4.3.0 release. The linked repository is active, unarchived, contains tests and a changelog, and shows two active contributors, although activity is concentrated in one contributor. The main reservations are the repository's very low visible popularity, absence of security scanning and a security policy, and the README not explicitly mentioning the package name; these reduce transparency somewhat but do not outweigh the strong release and maintenance evidence.
82%
Total Score
80
100
83
90
Health Score Breakdown
The repository is owned by a User account rather than an organization, so there is no organizational handoff or backing evidence to offset the concentrated contributor activity.
Two contributors were active in the last 3 months, but the leading contributor made 80% of commits, leaving some continuity risk despite a second active contributor.
The repository name matches the package, which supports identity, but the README does not mention the package name; this creates a modest transparency concern without suggesting repository piggy-backing.
The repository has 0 stars and 0 forks with 1 watcher, so external adoption and community visibility appear limited; this is a cautionary supporting signal, not a health verdict.
Composer is used as a build tool, but no security scanning tools are configured. The missing scanning lowers security-process transparency, although it does not indicate a malicious package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Frank Binding |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^5.4 || ^6.4 || ^7.0 | — | — |
contao/core-bundle Version ^4.13 || ^5.0 | — | — |
symfony/http-kernel Version ^5.4 || ^6.4 || ^7.0 | — | — |
components/flag-icon-css Version ^3.5 | — | — |
symfony/dependency-injection Version ^5.4 || ^6.4 || ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 days ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.