Its small runtime dependency set and stable final version keep integration straightforward. Use t3/dce instead, which the registry names as the replacement.
15%
Total Score
50
100
33
Packagist marks the entire package as abandoned and explicitly names t3/dce as its replacement. Package-wide deprecation is a severe dependency risk.
The package has 65 releases since 2015, but its latest release was in October 2021 and it has had no releases in nearly five years. That strongly indicates abandonment despite its previously active cadence.
Only one account has package publish access, leaving little visible publishing redundancy. This is supporting caution rather than a verdict because registry access does not prove who actively maintains the code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^9.5 || ^10.4 || ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.