Usable with caveats: the package is licensed, clearly backed by its matching repository, and has no install scripts or deprecation notice. However, it has had only one release, in July 2022, and no commits in the last three months, so ongoing compatibility and maintenance are uncertain.
60%
Total Score
67
100
83
75
This package has only one release, published about 4 years ago, with no releases in the last 12 months. That is a meaningful concern for a package tied to a changing CMS ecosystem.
The repository recorded zero commits and zero active maintainers over the last three months, which is the strongest evidence that maintenance may currently be paused.
There are two open issues and two open pull requests, with one new pull request in the last month but no merged pull requests. This suggests some activity or pending work without clear resolution capacity.
The repository has no stars, three forks, and one watcher. This is limited adoption evidence, but popularity is only supporting evidence and does not by itself make the package unsafe to use.
Composer is used for builds, matching the package ecosystem. No security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^10.4 || ^11 | — | — |
georgringer/news Version ^9 || ^10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.