Usable with caveats: the repository is active, licensed, and not archived, but this is a very small, immature package with only two releases, a minimal README, and limited public adoption. Verify compatibility carefully before making it a core dependency.
67%
Total Score
67
100
67
50
Only one account has registry publishing access, which creates some publishing continuity risk. The repository's recent activity from two contributors provides partial practical compensation, but does not remove the single-publisher limitation.
A README and changelog are present, but the README is only 37 characters and gives consumers little integration guidance. The absence of published tests is normal packaging practice and is not treated as a gap.
The package has existed for about three years but has only two releases, with roughly three years between them; one release in the last 12 months shows some recent activity but limited release maturity.
Two contributors were active recently, but one made about 71% of the commits, leaving maintenance somewhat concentrated in a small contributor base.
The repository name matches the package, which supports the linkage, but the README does not mention the package name, reducing transparency for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4 | — | — |
codefog/contao-haste Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.