This release appears generally suitable to depend on: it is clearly licensed, has a substantial and coherent 96-file package with tests, documentation, and a changelog, is not deprecated or archived, and has a repository that matches and documents the package. The main concern is maintenance consistency: although 14 releases were published in the last 12 months, repository commit activity shows no commits or active maintainers in the last 3 months, and the releases are highly clustered, so sustained support is not yet well demonstrated. The repository also lacks a security policy and security-scanning tooling. Overall, this is a healthy but relatively young, small-user-maintained package rather than a highly mature dependency.
78%
Total Score
63
100
83
90
The repository is owned by the user account tonsinn, so there is no organization-level backing shown; this limits demonstrated institutional continuity but is not inherently unhealthy.
Fourteen releases in the last 12 months show active publishing, but the median interval is only about 2 hours 50 minutes and the package is only 190 days old, so the history demonstrates activity more strongly than long-term maturity.
The repository has zero commits and zero active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite the recent registry releases.
There are no open issues or pull requests, and no recent issue or pull-request activity; this is neutral for a small package but provides little evidence of an active user or contributor community.
The repository has 1 star, 0 forks, and 0 watchers. Low popularity is only supporting evidence, but it indicates limited external adoption and review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^5.3 || ^6.0 | — | — |
contao/manager-plugin Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.