The package includes clear documentation, tests, a changelog, and a matching source repository. Its single release and one-person development history leave maintenance depth unproven, while workflow pinning and security-policy gaps add modest risk.
70%
Total Score
63
100
88
67
Only one registry account has publish access. That is consistent with an independently maintained package, but it provides little publishing redundancy.
The repository is owned by an individual rather than an organization, so the single-contributor and single-publisher concentration is not offset by visible organizational backing.
This package is 49 days old and has only one release, so there is not yet enough history to demonstrate sustained maintenance.
All four recent commits came from one contributor, so maintenance depends entirely on a single person.
Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and assurance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4 || ^14.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
typo3/cms-backend Version ^13.4 || ^14.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.