fgtclb/t3oodle

It has a clear license, release notes, repository tests, and recent work. The small project and limited security tooling leave less margin than a mature dependency.

Latest 2.0.4

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All 20 recent commits came from one contributor, giving the project a high single-contributor concentration. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo tooling

Composer build tooling is used, but no security scanning tools were detected. That is a meaningful maintenance and supply-chain hygiene gap for a dependency.

Workflow audit

All four workflows were analyzed without failures and have no untrusted checkout or script-injection findings. However, all seven action references are unpinned, and the publish workflow has two high-confidence template-injection findings; without a dangerous trigger these remain workflow hygiene concerns rather than standalone severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

FGTCLB

Direct Dependencies

Dependency	Last Release	Score
typo3/cms-core Version ^12.4	—	—
typo3/cms-extbase Version ^12.4	—	—
typo3/cms-fluid-styled-content Version ^12.4	—	—
georgringer/numbered-pagination Version ^2.0	—	—