The package includes a clear README, a stable release, and a small runtime dependency set. Registry releases stopped in July 2024, while recent repository work comes from one contributor; pin 11.2.3 and monitor maintenance.
67%
Total Score
75
92
50
The latest registry release was in July 2024, with no releases in the following 12 months. This is a meaningful maintenance concern despite the package having 12 releases overall.
All 3 recent commits came from one contributor, leaving maintenance dependent on a single active person. The repository owner is an individual rather than an organization, so there is no shown organizational handoff cushion.
The repository has no security policy. For a small extension this is a hygiene gap rather than a severe risk, but it reduces transparency for reporting and handling issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^10.4 || ^11.5 | — | — |
in2code/powermail Version >=8.0.0 <=10.9.99 | — | — |
sjbr/static-info-tables Version >=6.9.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.