Clear documentation, tests, and recent release notes make the project easier to adopt. Long-term continuity depends heavily on one maintainer, while the install script and missing security scanning add operational concerns.
68%
Total Score
75
81
75
The artifact and repository contain a GPL license, but the manifest declares GPL-2.0-or-later while the detected license text is GPL-2.0, creating a small licensing clarification issue.
A post-install-cmd script runs during installation, adding execution complexity and a small supply-chain review concern compared with a package without install-time scripts.
All 16 recent commits came from one contributor, so maintenance and release continuity are concentrated in a single person.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest gap in project hygiene.
Version 0.1.2 is not a stable major release, so its API may still change; however, it is not marked as a prerelease and recent releases are consistent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^14.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
typo3/cms-backend Version ^14.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
konradmichalik/php-color Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.