This is a mature, clearly identified TYPO3 extension with over six years of history, a stable 4.0.1 release, an unarchived matching repository, explicit GPL licensing, tests, documentation, and a small focused dependency set. The latest release and repository push are current, but the repository shows no commits or active maintainers in the last three months, and its workflows lack explicit top-level token permissions while no security policy or security scanning is present. It is usable as a dependency, but its recent maintenance and security-process evidence warrant caution.
72%
Total Score
75
100
89
80
The repository is owned by a user account rather than an organization, so the project has limited formal ownership backing. However, the named owner, matching repository, and registry team account provide some compensating continuity evidence.
There were zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, although it is partly offset by the current release and repository push timestamps.
The repository has only 5 stars, 1 fork, and 1 watcher. This is limited supporting evidence, but popularity alone is not a health verdict and does not outweigh the package's history and engineering evidence.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning process lowers security-process transparency, while the build tooling supports reproducible project management.
No repository security policy was found. This is a transparency and vulnerability-reporting gap for a package used in backend access-control functionality.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4 || ^13.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.