This is a usable but early-stage package with a clear GPL-3.0-or-later license, a matching and currently active repository, stable versioning, no deprecation, no install-time scripts, and a small dependency footprint. However, it has only 79 days of history and three releases, just two commits from one contributor in the last three months, no tests or changelog, no security policy, and no security-scanning tooling. Because this is a small Mautic campaign-resource template, the lack of tests and changelog is less concerning than it would be for a library, but the short history and single-maintainer concentration warrant caution before making it a critical dependency.
68%
Total Score
50
100
78
90
Only one registry account, Predrag Vukovic, has publishing access. This is a meaningful continuity risk for a user-owned project, with no organization backing shown by the provided project context.
A README documents the campaign contents and structure, but neither the artifact nor repository has tests or a changelog. For a small data/template package this is partly expected, though it reduces maintenance transparency.
The repository owner is an individual user rather than an organization, so there is no provided organizational backing to offset the single-maintainer concentration.
The package is only 79 days old with three releases and a median release interval of about 40 days. This shows some release activity but provides limited evidence of long-term maintenance.
One contributor made 100% of the two recent commits, creating a concentrated bus factor and increasing abandonment or handoff risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mautic/core-lib Version ^5.0 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.