Package Health/sioweb/contao-element-group

sioweb/contao-element-group

It has a stable 1.0.1 version, no install-time scripts, and a declared LGPL-3.0-or-later license. The single-maintainer project has no README or security policy, reducing transparency and making long-term support less clear.

Latest v1.0.1

Packagist

56%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry maintainer is listed, leaving a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is no provided evidence that a broader team compensates for this.

Package scaffolding

The package contains no README, tests, or changelog, and the repository also reports none. Missing tests and changelog are acceptable for a published artifact, but the missing README reduces consumer transparency for this library-style extension.

Release history

The package has had only two releases, both published in January 2025, with no releases in the following 20 months. That weakens evidence of ongoing maintenance, although a small stable extension may not need frequent releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with roughly 20 months without a release. This is a meaningful abandonment risk for future compatibility fixes.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tooling is reported. This is a modest transparency gap rather than evidence of an unsafe release.