This release is usable but has limited evidence of maturity because the package is effectively one day old, with only three releases and no recorded repository commits or active maintainers in the last three months. It has several positive indicators: it is not deprecated or archived, uses a stable 1.1.0 version, includes a license, README, changelog, substantial source tree, and no install-time lifecycle scripts. The absence of tests, security scanning, and a security policy reduces transparency and assurance, while the zero popularity metrics are unsurprising for such a new release. Dependence is reasonable with normal review and monitoring, but the package should not yet be treated as a well-established dependency.
68%
Total Score
50
100
78
88
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.13 || ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.