extensionbuilder/extensionbuilder-typo3

Maintainerscaution

Only one registry account has publish access. The linked repository is organization-owned, which makes a short registry maintainer list less concerning, but it still provides limited publishing redundancy.

Package scaffoldingcaution

A substantive README and changelog are present, and GitHub Releases are used, but neither the package nor repository contains tests; for a development tool this weakens verification of release quality.

Release historycaution

The package is only 1 day old and has three releases, with releases arriving roughly every 16 hours on median. This demonstrates activity but provides little evidence of long-term maturity or stability.

Repo bus factorcaution

All nine recent commits came from one contributor, creating a genuine bus-factor concern. Organization ownership partly compensates because maintenance can potentially be handed off within the organization.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap rather than evidence of maliciousness.