danielsiepmann/tracking
The package includes substantial documentation, a changelog, repository tests, and a clear source match. Its workflow leaves all five actions unpinned and the repository has no security policy, so maintenance hygiene is not flawless.
78%
Total Score
88
100
50
Health Score Breakdown
The package runs a post-autoload-dump script during installation. This adds some installation complexity, but the signal does not indicate a dangerous or excessive script.
There were no new or closed issues or pull requests in the last month, although three pull requests remain open; this is a small activity concern rather than evidence of abandonment because releases and commits remain recent.
The repository has no security policy. This weakens vulnerability-reporting transparency, though it is not evidence that the package is unsafe by itself.
The sole workflow was fully analyzed with no untrusted checkouts, script injections, or audit findings, but all five action references are unpinned. That leaves avoidable build-reproducibility risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Siepmann |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/dbal Version ^4.0 | — | — |
typo3/cms-core Version ^14.3 | — | — |
symfony/console Version ^7.2 | — | — |
psr/http-message Version ^2.0 | — | — |
typo3/cms-backend Version ^14.3 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.