Package Health/blueways/bw-focuspoint-images

blueways/bw-focuspoint-images

This is a generally usable and established TYPO3 extension: it has been released since 2019, has a stable 7.0.0 release, a clear GPL license, a matching repository with substantial documentation and repository tests, and no deprecation or archive status. The main concerns are limited recent maintenance evidence—only 1 commit from 1 active contributor in the last 3 months, with 100% contributor concentration—plus the absence of a security policy and explicit top-level workflow permissions. The package is therefore suitable with normal dependency review, but its maintenance resilience and repository security hygiene warrant monitoring.

Latest 7.0.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One of three workflows uses pull_request_target, which warrants review because it can run with elevated repository context; no untrusted checkout or script-injection patterns were detected, partially reducing the concern.

Project backing

The repository is owned by a User account rather than an organization, so there is no observed organizational backing to offset the concentrated maintainer base.

Repo bus factor

All recent commit activity is concentrated in one contributor, creating a meaningful continuity risk because the repository is owned by an individual rather than an organization.

Repo commit activity

Only 1 commit was recorded in the last 3 months from 1 active maintainer, which is limited evidence of current maintenance for a dependency.

Repo issue activity

There are 5 open issues and 5 open pull requests, with 1 issue closed in the last month but no merged pull requests; this suggests some unresolved maintenance backlog.