TYPO3 dashboard widget to display a (GitHub lookalike) contribution heatmap of e.g. content changes.
61%
Total Score
75
71
100
The package has only three releases and none in the last 12 months, although the repository was pushed recently. This suggests a meaningful publishing-maintenance gap rather than abandonment.
Two contributors were active recently, with the lead contributor responsible for about two-thirds of commits. The second active contributor reduces, but does not remove, concentration risk.
The repository name does not match the package name and its README does not mention the package, so the registry package-to-source relationship is less transparent than expected.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and supply-chain hygiene gap.
Version 0.3.0 is not a stable major release, so the early-stage API may still change. It is not marked as a prerelease, which partly offsets the concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.13.8 || ^3.9 || ^4.2 | — | — |
typo3/cms-core Version ^12.0 || ^13.0 | — | — |
typo3/cms-fluid Version ^12.0 || ^13.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
typo3/cms-backend Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.