Package Health

labor-digital/typo3-distributed-cache-clearing

Documentation, licensing, and a focused dependency set make the package understandable to integrate. The repository is not archived and its workflows had no reported audit findings, but the evidence is too old for a new dependency.

Latest 10.0.0PackagistPackagist

40%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

Only two releases exist, both in May 2022, with no releases in the last 12 months and the latest release more than four years old. This is strong evidence of abandonment risk for a package used in infrastructure.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern compared with the long maintenance gap.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings or dangerous trigger and sink combinations. However, all five analyzed action references are unpinned, leaving avoidable build reproducibility risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

LABOR.digital
Martin Neundorfer

Direct Dependencies

DependencyLast ReleaseScore
labor-digital/typo3-better-api
Version ^10.35.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform