The source remains available and clearly matches the package, with a substantial README, changelog, and organization backing. However, registry releases stopped in May 2022 and the repository has had no commits or active maintainers in the last three months; install-time scripts and no security policy add smaller concerns.
45%
Total Score
50
78
75
The package has 12 releases since 2019 but none in the last 12 months, with the latest release in May 2022; this is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence of stalled maintenance.
The package declares pre- and post-install/update Composer scripts, increasing installation complexity and supply-chain exposure compared with a package without lifecycle execution.
There were no new or closed issues or pull requests in the last month, while 20 pull requests remain open, suggesting unresolved maintenance activity.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of broad review or community adoption; popularity is supporting evidence, so this is a minor concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^8.7 | — | — |
typo3/cms-fluid Version ^8.7 | — | — |
typo3/cms-extbase Version ^8.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.