Package Health

friendsoftypo3/mediace

Allows to have non-FAL Media Content Elements like Video and Audio, behaves like TYPO3 4.x and TYPO3 6.x, but acts as compatibility layer for TYPO3 CMS 7.

Latest 7.6.5PackagistPackagist

48%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, consistent with the stale release history and indicating elevated abandonment risk.

Release historycaution

The package has had only 3 releases since May 2016, with no release in nearly 6 years and none in the last 12 months. This is a substantial maintenance concern despite the package being feature-complete.

Repo issue activitycaution

The repository has 18 open issues but no new or closed issues and no merged pull requests in the last month. This suggests limited current maintenance attention.

Repo toolingcaution

Composer is used for builds, which is appropriate for this package, but no security scanning tools are present. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more alongside the lack of recent maintenance activity.

Vulnerabilities

TitleVersionsSeverity
CVE-2020-15086
friendsoftypo3/mediace is vulnerable to Improper Input Validation in versions 7.6.2 - 7.6.5.
7.6.2 - 7.6.5
Critical

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
typo3/cms-core
Version ~7.6.0
—
—
typo3/cms-frontend
Version ~7.6.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform