This is a generally healthy, actively published TYPO3 package: it has 43 releases over roughly 2.8 years, 13 releases in the last 12 months, a stable non-prerelease version, no registry deprecation, an unarchived repository with a recent push, and organization backing. The main concerns are that only one contributor made the single commit in the last three months, the artifact lacks a README and changelog, and the repository has no security policy; these reduce transparency and indicate a concentrated maintenance base, although repository tests, GitHub Releases, Dependabot, read-only workflow permissions, and the organization-owned project provide meaningful mitigating evidence.
78%
Total Score
80
50
94
80
The package declares nine runtime dependencies, including TYPO3 core, form, scheduler, and related framework components. This is a meaningful integration surface and can increase compatibility maintenance burden, but the dependencies are consistent with the package's framework role.
The package defines a post-autoload-dump lifecycle script. Install-time execution adds some supply-chain and reproducibility surface, but a single Composer lifecycle hook is not by itself evidence of poor package health.
All recent commits came from one contributor, giving a 100% top-contributor share. That is a concentrated maintenance base, partly mitigated by the repository being owned by an organization that can potentially hand maintenance off.
Only one commit was made in the last three months by one active maintainer. This is a meaningful recent-activity weakness, although the frequent release history and recent pull-request merges indicate that the project has not broadly stopped moving.
The repository has zero stars and forks and four watchers. Popularity is limited, but this is supporting evidence only and does not outweigh the package's release and maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4 || ^13.4 || ^14.3 | — | — |
typo3/cms-form Version ^12.4 || ^13.4 || ^14.3 | — | — |
typo3/cms-scheduler Version ^12.4 || ^13.4 || ^14.3 | — | — |
mediatis/form_fieldnames Version ^4.3 | — | — |
digital-marketing-framework/typo3-core Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.