think-digital-agency/contao-the-lightbox
Clear documentation, tests, release notes, and a two-person contributor base support ongoing maintenance. The workflow is audited completely but leaves all six actions unpinned, and no security policy or scanning tool is present.
82%
Total Score
90
100
83
83
Health Score Breakdown
One registry maintainer, Think Digital Agency, is consistent with the linked project owner being an individual account; it indicates concentrated publishing access but not a lack of development activity.
The package is only 13 days old, with six releases and a median interval of about 6 hours. This shows strong initial activity but offers little long-term maintenance history.
The repository has one star and no forks or watchers. This is limited supporting evidence, but popularity is not decisive for a young, narrowly scoped package.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of unsafe code.
The repository has no security policy. For a package that integrates frontend assets, this reduces the transparency of vulnerability reporting and response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Think Digital Agency |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 contao/core-bundle Version ^5.3 || ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 hours ago
- Created
- 13 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.