terminal42/dcawizard

This is a generally healthy and established package: it has been published for over 12 years, has 40 releases including 8 in the last 12 months, and the current release is a stable non-prerelease version. The linked repository is active, not archived, organization-backed, correctly references the package in its README, and uses read-only workflow permissions without detected dangerous workflow patterns. The main concerns are that recent repository activity is light and concentrated in one contributor, while neither the artifact nor repository contains tests or a changelog and no security policy or security-scanning tooling was found. These are meaningful transparency and maintenance gaps, but they do not outweigh the long release history, current publishing activity, and organizational backing.

Latest 5.0.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README and GitHub Releases are present, but neither the artifact nor repository has tests or a changelog. The missing tests and changelog reduce maintenance transparency because no provided signal compensates for them.

Repo bus factor

All 2 recent commits came from one contributor, giving a 100% top-contributor share and a thin recent contributor base. Organization backing provides some ability to hand off maintenance, but no second active contributor is shown.

Repo commit activity

Only 2 commits were recorded in the last 3 months, so recent development activity is light. This is a maintenance concern, but it is partly offset by 8 releases in the last year and a repository update at assessment time.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. The missing security automation is a hygiene gap rather than a severe health risk.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not establish that the package is unsafe or unmaintained.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

terminal42 gmbh

Direct Dependencies

Dependency	Last Release	Score
doctrine/dbal Version ^3.7 \|\| ^4.3	—	—
symfony/asset Version ^7.4	—	—
symfony/config Version ^7.4	—	—
symfony/routing Version ^7.4	—	—
contao/core-bundle Version ^5.7	—	—