This release appears healthy and suitable to depend on: it is actively released, currently stable, not deprecated, backed by a non-archived organization-owned repository, and shows substantial recent activity across four contributors. The package and repository include a README, tests, changelog, documentation, and a coherent 122-file TYPO3 extension structure, while the repository matches and explicitly documents the package. The main weaknesses are the absence of a security policy and explicit GitHub Actions token permissions, plus limited repository popularity; these are hygiene and maturity concerns rather than evidence of abandonment, especially given the recent release and commit activity.
88%
Total Score
100
100
89
80
The repository has one star and no forks or watchers, indicating limited public adoption; this is supporting context only and is outweighed by the strong recent release, issue, and commit activity.
The repository uses Composer build tooling, but no security scanning tools were detected; this is a modest security-process gap rather than a maintenance failure.
No security policy was found in the repository, reducing transparency about vulnerability reporting and response procedures.
The single analyzed workflow has no top-level token permissions declaration. Although it requests no detected top-level write access, explicitly restricting permissions would provide stronger CI security hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.3 | — | — |
typo3/cms-core Version ^13.4 || ^14.3 | — | — |
typo3/cms-fluid Version ^13.4 || ^14.3 | — | — |
typo3/cms-backend Version ^13.4 || ^14.3 | — | — |
typo3/cms-extbase Version ^13.4 || ^14.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.