Base package for FGTCLB Academic packages
82%
Total Score
healthy
Healthy, with active releases and a workflow-hygiene concern from unpinned actions.
The artifact contains a GPL-2.0 license file, but it is narrower than the manifest's GPL-2.0-or-later declaration; consumers should account for that mismatch.
All four analyzed action references are unpinned, and the audit found two high-confidence template-injection findings; however, there are no pull_request_target or workflow_run triggers and no untrusted checkout or script-injection paths, limiting the practical risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4.22 || ^13.4 | — | — |
fgtclb/academic-base Version 2.3.4@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.