Package Health

schachbulle/contao-showfromto-bundle

Usable with caveats: it is a clearly packaged, licensed, non-deprecated extension with a matching repository, but it is brand new and has no demonstrated maintenance history yet. The repository also lacks security scanning and a security policy, so longer-term reliability remains unproven.

Latest 1.1.0PackagistPackagist

63%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publishing access. That is a limited publishing base, though the package is backed by a matching source repository, so this is a resilience concern rather than evidence of abandonment.

Project backingcaution

The package is published under one user namespace and its repository is owned by a different individual account, rather than an organization. This provides less visible institutional backing and leaves continuity dependent on a small owner base.

Release historycaution

This package is only 0 days old with two releases published within about 1 hour and 27 minutes, so there is not yet enough history to demonstrate sustained maintenance or release reliability.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last 3 months, but the package itself was created today, making this primarily an absence of historical evidence rather than a demonstrated collapse in maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP extension this is a hygiene gap, although it is not by itself evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Frank Hoppe

Direct Dependencies

DependencyLast ReleaseScore
contao/core-bundle
Version ^4.13 || ^5.0

Weekly Downloads

Info

Last Published
3 days ago
Created
4 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform