The package is licensed, documented, and the repository was updated recently. It has little release history, no security policy or scanning, and only one maintainer, so long-term support is not yet proven.
68%
Total Score
50
100
83
83
The package is only 40 days old with two releases, so its maintenance record and compatibility track record are still limited.
There are no open issues or pull requests and no activity in the last month. Given the repository's 40-day age, this is limited evidence rather than proof of abandonment.
The repository has only 1 star and no forks or watchers, so there is little external adoption evidence, although popularity alone is not decisive.
Composer build tooling is present, but no security scanning tool is configured, leaving a modest transparency and maintenance gap.
The repository has no security policy, which leaves reporting and handling expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^9.0 | — | — |
neos/fusion-afx Version ^9.0 | — | — |
flowpack/listable Version ^4.0 | — | — |
sitegeist/taxonomy Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.