The artifact is coherent, has one runtime dependency, and uses a stable non-prerelease version. The GPL declaration conflicts with the detected GPL-3.0 license, and the repository could not be found for maintenance verification.
52%
Total Score
100
75
100
A license file is present, but the manifest declares GPL-2.0-or-later while the artifact license is detected as GPL-3.0; this mismatch creates legal uncertainty for adopters.
The package has 29 releases since November 2019, but none in the last 12 months and the latest release is about two and a half years old, indicating stalled maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.