jweiland/replacer

The package has clear documentation, repository tests, a matching organizational source repository, and a current release supporting TYPO3 v14. Recent development is quiet, and workflow references are unpinned; the high-confidence template-injection findings remain hygiene concerns because no untrusted trigger or checkout is reported.

Latest 5.0.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2018 with 19 releases, but only one release appeared in the last 12 months and the median interval is about 147 days. This indicates a mature but relatively slow release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is the clearest abandonment concern, although the recent release shows the project has not stopped entirely.

Repo issue activity

There are four open issues and one new issue in the last month, with no pull requests merged; this suggests limited recent project activity but is not, by itself, evidence of abandonment.

Repo popularity

The repository has only 3 stars and 9 forks, so community adoption appears modest. Popularity is supporting evidence rather than a decisive health measure, especially for a focused extension.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a moderate transparency gap rather than a direct dependency risk.