The package includes a README, repository tests, a clear license, and no install-time scripts. Its small scope and matching source repository help, but maintenance activity and security oversight are limited.
61%
Total Score
50
100
88
75
Only one account has registry publish access. For this independently owned package that is a limited maintainer base, increasing continuity risk if the publisher becomes unavailable.
The registry namespace and repository owner match, but both are tied to a single user rather than an organization. This is consistent ownership, while offering limited organizational continuity.
Only two releases exist, with no release in the last 12 months and a median interval of about 4.3 years. This indicates a slow-maintained package, though the small extension scope may require fewer releases.
There were no commits and no active maintainers in the last three months, consistent with the last release being over two years ago. This is the strongest evidence of current maintenance risk.
There are two open issues, with no issues or pull requests created or closed in the last month. This is limited evidence of ongoing community activity and aligns with the broader maintenance slowdown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^11.5.34 || ^12.4.10 | — | — |
typo3/cms-frontend Version ^11.5.34 || ^12.4.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.