The linked project is organization-backed, has repository tests and release notes, and its workflows use read-only permissions with pinned actions. Recent commit activity is absent, so maintenance evidence is mixed; prefer the replacement for new projects.
58%
Total Score
83
100
81
75
Packagist marks the package abandoned at package scope and names jobrouter/typo3-data as its replacement. This is a substantial adoption concern despite the linked repository remaining active and releasing this version.
The package has existed for about 6 years and 11 months with 29 releases, but only one release in the last 12 months. The latest release is recent, partly offsetting the otherwise thin recent cadence.
There were zero commits and zero active maintainers in the last 3 months. That weakens evidence of ongoing maintenance, even though recent pull-request merges and the current release provide some counterevidence.
No repository security policy was found. This is a modest transparency gap for reporting vulnerabilities, but it does not by itself indicate abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4 || ^14.3 | — | — |
typo3/cms-fluid Version ^13.4 || ^14.3 | — | — |
typo3/cms-backend Version ^13.4 || ^14.3 | — | — |
typo3/cms-frontend Version ^13.4 || ^14.3 | — | — |
jobrouter/typo3-base Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.