The package is clearly licensed, has release notes and a useful README, and its repository matches the package. Maintenance has been quiet for about one year, so pinning this version is preferable for production use.
62%
Total Score
67
100
88
75
The package has only 4 releases since December 2022 and none in the last 12 months, indicating a slow maintenance cadence. The September 2025 release provides recent evidence of continued ownership but does not remove the current gap.
The repository had 0 commits and 0 active maintainers in the last 3 months. Combined with no registry release in the last 12 months, this raises maintenance and abandonment concerns.
There are 2 open issues and 2 open pull requests, but no new or closed issues or pull requests in the last month. This is consistent with the quiet recent maintenance picture.
The project uses Composer, appropriate for this package. No security scanning tools are configured, which is a modest transparency and maintenance gap.
The repository has no security policy. For a small extension this is not severe, but it leaves vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4 | — | — |
georgringer/news Version ^12 | — | — |
typo3/cms-redirects Version ^13.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.