schachbulle/contao-synapsis-bundle
This release appears suitable to depend on from a maintenance and transparency perspective, with substantial recent development, a non-archived matching repository, stable versioning, documentation, tests, a changelog, and a clear license. The package is very young at 41 days and has an unusually rapid release cadence, while the registry has one publisher, the repository has only two contributors, and there is no security policy or security-scanning tooling. Those gaps warrant monitoring, but the near-balanced recent contribution activity and strong artifact scaffolding substantially reduce abandonment and maturity concerns.
78%
Total Score
83
100
83
83
Health Score Breakdown
Only one account has registry publish access, creating publisher continuity risk; this is partly offset by the repository's active second contributor, but registry redundancy itself is limited.
The package is only 41 days old but has 33 releases, with a median interval of about 54 minutes; this shows active publishing but also an unusually rapid cadence that leaves limited evidence of long-term stability.
The repository has zero stars, forks, and watchers. This does not establish a maintenance failure, but it provides no external adoption evidence and leaves maturity less demonstrated.
Composer build tooling is present, but no security-scanning tools were detected; the missing scanning is a genuine security-hygiene gap, though it is not evidence of maliciousness.
No repository security policy was found, reducing transparency around vulnerability reporting and remediation expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Frank Binding |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^5.4 || ^6.4 || ^7.0 | — | — |
doctrine/dbal Version ^2.13 || ^3.0 || ^4.0 | — | — |
symfony/config Version ^5.4 || ^6.4 || ^7.0 | — | — |
contao/core-bundle Version ^4.13 || ^5.0 | — | — |
symfony/http-kernel Version ^5.4 || ^6.4 || ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 days ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.