The package has a clear README, matching repository, explicit license, and no install-time scripts. Pin 1.0.1 for this focused extension, but expect no ongoing fixes or compatibility updates.
58%
Total Score
50
100
81
75
Only one registry account can publish releases, leaving a thin publishing base; the matching repository and consistent ownership provide some supporting continuity.
This is the package's only release, published in July 2023, with no releases in the last 12 months; that suggests limited ongoing maintenance.
There were no commits and no active maintainers in the measured three-month period, providing direct evidence that development is currently inactive.
The repository uses Composer, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk for this small package.
The linked repository is not archived, although it was last pushed in July 2023, consistent with the inactive release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^v11.5.23 | — | — |
georgringer/news Version ^10 || ^11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.