felixnagel/privacyguard

The stable version, clear GPL license, README, and small dependency set support straightforward use. Nearly six years without a release and nearly four years without repository commits raise maintenance concerns, while the release workflow has high-confidence injection findings and unpinned actions.

Latest 3.1.1

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in October 2020, with no releases in the last 12 months; this is a substantial abandonment concern for a maintained TYPO3 extension.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in December 2022; this supports a strong maintenance concern.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; this is a moderate transparency gap for a package that processes customer records.

Workflow audit

The sole workflow has two high-confidence template-injection findings and one script-injection count, with both action references unpinned. No dangerous trigger or untrusted checkout was reported, so this is serious workflow hygiene risk but not independently disqualifying.