konradmichalik/typo3-solr-dashboard-widgets
This is a usable but early-stage package with encouraging maintenance and repository hygiene. It has four releases over 146 days, recent repository activity, repository tests, a clear license, security scanning, a security policy, and no deprecation or archival status. However, version 0.1.3 is not a stable major release, all recent commits come from one contributor, the artifact has no packaged tests or changelog, and it uses a post-install lifecycle script without explicit top-level workflow permissions. The package is therefore reasonable to evaluate and adopt with normal dependency review, but its young age and single-maintainer concentration warrant caution for production-critical use.
68%
Total Score
60
100
89
75
Health Score Breakdown
A post-install-cmd script runs during installation, creating additional supply-chain and installation-behavior exposure that should be reviewed before adoption.
Only one registry account has publish access. Because project_backing identifies an individual repository owner rather than an organization, this represents a real publishing continuity concern.
The repository owner is an individual user rather than an organization, so there is no provided evidence of institutional maintenance backing.
One contributor made all 18 commits in the last three months, giving the project a bus factor of one and increasing abandonment and continuity risk.
There were 18 commits in the last three months, showing substantial recent activity, but all activity came from one active maintainer.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Konrad Michalik |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^13.0 || ^14.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
typo3/cms-backend Version ^13.0 || ^14.0 | — | — |
typo3/cms-dashboard Version ^13.0 || ^14.0 | — | — |
apache-solr-for-typo3/solr Version ^13.0 || ^14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 15 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.