Unfit to use for a new dependency: the package is explicitly abandoned and has a successor bundle. Its repository has had no commits for nearly three years, despite a readable package and clear licensing.
22%
Total Score
0
67
75
Packagist marks the entire package as abandoned and names trilobit-gmbh/contao-worldofimages-bundle as its replacement. This is a severe adoption risk because future fixes and compatibility work should be expected in the successor instead.
The package has only two releases and none in the last 12 months; its latest release was published on November 20, 2023, nearly three years before the collection date. This supports the abandonment concern rather than showing an actively maintained release line.
The repository recorded zero commits and zero active maintainers during the last three months, with its last push on November 20, 2023. That indicates maintenance has stopped, although the repository is still available.
The repository has no security policy. This is a transparency gap, though it is secondary to the package-wide abandonment and explicit replacement.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.4 || ^4.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.