Clear documentation and release notes support adoption, while organizational ownership offsets the concentrated commit activity. The workflows still need hygiene work because all six actions are unpinned and a high-confidence template-injection finding remains.
83%
Total Score
100
100
100
50
No repository security policy was found, leaving vulnerability-reporting expectations less transparent for a maintained integration package.
Both workflows were analyzed without missing files or untrusted checkouts, but all six action references are unpinned and a high-confidence template-injection finding remains in the publishing workflow. The template-injection finding is a workflow hygiene concern, not a standalone severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-backend Version ^13.4 || ^14.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.