Package Health

webexmachina/contao-portfolio

Healthy and suitable to use, with a few transparency caveats. It has a long release history, regular recent releases, an active unarchived organization-owned repository, and documented changes for this version; security-policy coverage and independent project visibility are limited.

Latest 4.2.0PackagistPackagist

80%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Repo issue activitycaution

Five issues remain open and there was no issue or pull-request activity in the last month, limiting evidence of active issue handling. However, the recent release and repository push provide compensating maintenance evidence.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little independent community visibility or adoption evidence. This is supporting evidence only and is outweighed by the project's release history and organization backing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance-process gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Web ex Machina

Direct Dependencies

DependencyLast ReleaseScore
contao/core-bundle
Version ^5.3 || ^5.7
terminal42/dcawizard
Version ^3.0 || ^4.0
contao/manager-plugin
Version ^2.0
webexmachina/contao-utils
Version ^2.0
terminal42/contao-changelanguage
Version ^3.8

Weekly Downloads

Info

Last Published
7 days ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform