Its long release history and 40 releases in the last 12 months show an established project. Organization backing, a matching repository, tests, licensing, and a security policy provide useful transparency, but the release is a beta and the package is marked abandoned in favor of neos/media.
53%
Total Score
75
100
75
100
The entire package is marked abandoned on Packagist and names neos/media as its replacement. This is a substantial dependency risk even though the replacement points to an active successor project.
The repository recorded zero commits and zero active maintainers in the last 3 months. This conflicts with the recent registry release and recent push, but still leaves current maintenance capacity unclear.
The repository uses Composer, but no security scanning tools were detected. That is a modest transparency and hygiene gap, not evidence of abandonment by itself.
Version 9.2.0-beta4 is a prerelease, so it carries more compatibility risk than a stable release; prereleases represent only 20% of recent releases, which is modest compensation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/flow Version * | — | — |
neos/cache Version * | — | — |
doctrine/orm Version ^2.14.0 | — | — |
neos/imagine Version ^3.1.0 | — | — |
doctrine/dbal Version ^3.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.