Package Health

webexmachina/contao-geodata

The repository is active enough to remain unarchived, and the release includes notes, a README, and a changelog. Licensing is inconsistent, and no security policy is present.

Latest v3.0.0PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Licensecaution

A license file is present, but the manifest declares LGPL-3.0+ while the detected artifact license is Apache-2.0 and the README describes Apache 2.0. This inconsistency needs clarification before adoption.

Release historycaution

The package has 19 releases over about three years, but none in the last 12 months; this suggests a meaningful slowdown in published maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month period, a direct sign of currently absent development activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk on its own.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Web ex Machina

Direct Dependencies

DependencyLast ReleaseScore
contao/core-bundle
Version ^4.13 || ^5.3
terminal42/dcawizard
Version ^2.7 || ^3.0
phpoffice/phpspreadsheet
Version ^1.29 || ^3.3
webexmachina/contao-utils
Version ^2.0

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform