It has a clear README, a stable release, and a small dependency surface. However, no registry release has appeared since September 2015, the repository has had no recent commits, and three issues remain open. The tiny community and absent security policy add maintenance risk.
38%
Total Score
50
100
78
50
The package has only two releases, with the latest published in September 2015 and none in the last 12 months. This is strong evidence of abandonment for a framework extension that may need compatibility maintenance.
There were zero commits and zero active maintainers during the last three months. Together with the 2015 last push, this is strong evidence that the project is no longer actively maintained.
Three issues remain open, while there were no new or closed issues and no pull requests in the last month. Unresolved issues combined with no recent activity increase maintenance uncertainty.
The repository has one star, zero forks, and one watcher, indicating very limited external adoption or review. Popularity is supporting evidence, but this adds to the concern raised by inactivity.
The repository uses Composer, but no security scanning tools were detected. The missing scanning is a hygiene gap, not a severe risk by itself, and the old project activity remains the larger concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core Version >=3.3,<4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.