helhum/typo3-config-handling

Release historycaution

The package has 49 releases since 2017, but its latest release was about 17 months before collection and there were no releases in the last 12 months. This indicates a meaningful maintenance slowdown for a dependency that may need TYPO3 compatibility updates.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. Although the repository was pushed in April 2026, the reported lack of commit activity still indicates limited recent maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. For a package handling TYPO3 configuration and encrypted settings, the absence reduces the project's transparency for reporting and handling security issues.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted triggers. However, all 3 action references are unpinned, and the workflow has no top-level permissions block, leaving avoidable build-reproducibility and permission-hygiene gaps.