It has a matching repository, tests, a changelog, and 182 historical releases. Maintenance stopped after August 2022, with no releases in four years, while all five workflow actions are unpinned and no security policy is provided.
55%
Total Score
75
75
50
The project has 182 releases and historically released about every two days, but it has made no release in the last four years; the prolonged stop materially raises abandonment risk.
There are no new or closed issues or pull requests in the last month, and two pull requests remain open, providing no evidence of current maintenance.
The repository is not archived, which is a compensating sign, but its last push was in December 2022 and aligns with the long release gap.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The workflow audit is complete and found no dangerous triggers or audit findings, but all five analyzed action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
typo3/cms-core Version ^10.0 | — | — |
neunerlei/arrays Version ^3.3.3 | — | — |
psr/simple-cache Version ^1.0 | — | — |
neunerlei/options Version ^1.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.