Compatibility expectations are poor for future Contao projects. It has only one release, no commits in the last three months, and its README says the feature is now part of Contao 5.7; the missing security policy is a smaller concern.
42%
Total Score
50
25
50
The package includes a substantial README, but it explicitly warns that Row Wizard is now part of Contao 5.7 and no longer needs to be installed. The absence of tests and a changelog is normal for a published artifact and is not a concern by itself.
The package has only one release, published about 9 months ago, with no established release cadence. That leaves little evidence of ongoing maintenance or compatibility updates.
There were no commits and no active maintainers in the last three months. Although the repository was pushed earlier, the recent inactivity weakens confidence in continued maintenance.
The linked repository has no security policy. This is a transparency and reporting gap, though it is less significant than the package's apparent obsolescence and limited maintenance history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/asset Version ^6.4 || ^7.0 | — | — |
contao/core-bundle Version ^5.3 | — | — |
symfony/http-kernel Version ^6.4 || ^7.0 | — | — |
codefog/contao-haste Version ^5.3 | — | — |
symfony/event-dispatcher Version ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.