Contao 4 / Contao 5 constants bundle
62%
Total Score
caution
Usable with caveats: maintenance is slow, with no commits in the last three months and only one release in the past year.
The project has existed for about 8 years with 13 releases, but only 1 release in the last 12 months and a median interval of about 7 months indicate slow maintenance.
There were 0 commits and 0 active maintainers in the last 3 months, which is a meaningful sign of limited current development capacity despite the recent release.
Composer is used for builds, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.13 || ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.