superlogin/contao-client
The repository is small, clearly tied to the package, and has a usable README. It has no security policy or scanning, increasing the burden on adopters.
38%
Total Score
75
71
50
Health Score Breakdown
The manifest declares a proprietary license, with no detected license text or license file. That creates a serious restriction for developers expecting an open-source dependency.
The package has 38 releases since 2015, but its latest release was March 7, 2022, with no releases in the last 12 months. This indicates a long period without published updates.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old latest registry release, this indicates substantially reduced maintenance activity.
Composer is used as the build tool, but no security-scanning tools are configured. The build setup is appropriate, while the missing scanning reduces supply-chain transparency.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it is not evidence of malicious behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hendrik Obermayer, Comolo GmbH |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 contao/core-bundle Version >=4.5,<5.0 | — | — |
league/oauth2-client Version ~1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.