57%
Total Score
caution
Usable with caveats: no releases or commits for about two years, and no license is declared.
No license is declared, no license file is included, and no repository license file was found. This leaves redistribution and use rights unclear for a package intended to be integrated into TYPO3 projects.
The package has been published since 2017 with 88 releases and a median release interval of about four days, showing substantial historical maintenance. However, there were no releases in the last 12 months, indicating that maintenance has stopped or slowed sharply.
There were no commits and no active maintainers in the last three months. Combined with no releases in the last year, this is evidence of currently inactive maintenance, despite the project's stronger historical record.
The repository has 26 open issues and four open pull requests, with no new or closed issues or merged pull requests in the last month. The unresolved backlog and lack of recent movement add to the maintenance concern.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. This is a transparency and hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version >=7.6.0 <=8.7.99 | — | — |
typo3/cms-fluid Version >=7.6.0 <=8.7.99 | — | — |
typo3/cms-backend Version >=7.6.0 <=8.7.99 | — | — |
typo3/cms-extbase Version >=7.6.0 <=8.7.99 | — | — |
typo3/cms-filemetadata Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.