itribe/typoscript-code

Release historycaution

The package has existed since February 2016 and released version 7.2.0 in January 2026, but only one release appeared in the last 12 months across 10 releases, indicating a low cadence for a mature extension.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release was recent, the lack of ongoing activity leaves maintenance capacity uncertain.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and assurance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. For a small extension this is a transparency gap, though it is less severe than an archived or deprecated project.

Workflow auditcaution

The workflow audit completed cleanly, uses read-only permissions, and found no high-confidence dangerous patterns. Both analyzed action references are unpinned, which weakens build reproducibility and action supply-chain integrity.