Package Health

digital-marketing-framework/typo3-distributor-core

This is a generally healthy, actively published TYPO3 package: it has 43 releases over roughly 2.8 years, 13 releases in the last 12 months, a stable non-prerelease version, no registry deprecation, an unarchived repository with a recent push, and organization backing. The main concerns are that only one contributor made the single commit in the last three months, the artifact lacks a README and changelog, and the repository has no security policy; these reduce transparency and indicate a concentrated maintenance base, although repository tests, GitHub Releases, Dependabot, read-only workflow permissions, and the organization-owned project provide meaningful mitigating evidence.

Latest 4.0.2PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Dependency profilecaution

The package declares nine runtime dependencies, including TYPO3 core, form, scheduler, and related framework components. This is a meaningful integration surface and can increase compatibility maintenance burden, but the dependencies are consistent with the package's framework role.

Lifecycle scriptscaution

The package defines a post-autoload-dump lifecycle script. Install-time execution adds some supply-chain and reproducibility surface, but a single Composer lifecycle hook is not by itself evidence of poor package health.

Repo bus factorcaution

All recent commits came from one contributor, giving a 100% top-contributor share. That is a concentrated maintenance base, partly mitigated by the repository being owned by an organization that can potentially hand maintenance off.

Repo commit activitycaution

Only one commit was made in the last three months by one active maintainer. This is a meaningful recent-activity weakness, although the frequent release history and recent pull-request merges indicate that the project has not broadly stopped moving.

Repo popularitycaution

The repository has zero stars and forks and four watchers. Popularity is limited, but this is supporting evidence only and does not outweigh the package's release and maintenance activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mediatis AG

Direct Dependencies

DependencyLast ReleaseScore
typo3/cms-core
Version ^12.4 || ^13.4 || ^14.3
—
—
typo3/cms-form
Version ^12.4 || ^13.4 || ^14.3
—
—
typo3/cms-scheduler
Version ^12.4 || ^13.4 || ^14.3
—
—
mediatis/form_fieldnames
Version ^4.3
—
—
digital-marketing-framework/typo3-core
Version ^4.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform