Healthy and suitable to depend on. It has six releases in the last year, active recent commits from two contributors, a maintained organization-owned repository, and clear licensing and release notes; the main caveat is that 15 of 16 recent commits came from one contributor and the repository lacks security scanning.
88%
Total Score
88
100
94
83
Recent work is highly concentrated: one contributor made 15 of 16 commits, leaving a meaningful continuity risk. The second active contributor and organization ownership partly compensate for that concentration.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao/core-bundle Version ^4.9 || ^5.0 | — | — |
phpseclib/phpseclib Version ^3.0 | — | — |
codefog/contao-haste Version ^4.24 || ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.