Tests, a substantial README, and organizational ownership provide useful maintenance and adoption context. The long release gap, absent security policy, and unpinned workflow actions warrant extra caution for long-term use.
58%
Total Score
75
93
50
The package has 42 releases since March 2016, but none in the last 12 months; its latest release was over two years ago. This is meaningful evidence of slowed maintenance despite its established history.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The non-archived repository and organizational ownership provide some context but do not offset the lack of recent work.
The linked repository has no security policy, leaving reporting and response expectations unclear for a package that integrates with a web application.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^11.5 | — | — |
typo3/cms-fluid Version ^11.5 | — | — |
typo3/cms-backend Version ^11.5 | — | — |
typo3/cms-extbase Version ^11.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.