The extension is clearly identified, licensed, documented, and backed by an organization, with a small dependency surface. Maintenance evidence is thin and the repository has no security policy, so pin this version and expect limited ongoing support.
65%
Total Score
75
75
50
A license file is present in both the artifact and repository, but the detected GPL-2.0 text does not exactly match the declared GPL-2.0-or-later metadata. The release is licensed, with a minor consistency concern.
The package has existed for about 4 years and 10 months, but only three releases have been published, with one release in the last 12 months and a median interval of about 2 years and 2 months. This indicates slow maintenance rather than clear abandonment.
The repository recorded no commits and no active maintainers in the last 3 months. The release on March 22, 2026 shows recent publishing, but current development activity remains limited.
The linked repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although the package's narrow scope limits the impact of this gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^9.5.16 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.