This release appears usable and actively published: it has a substantial package tree, a stable non-prerelease version, frequent recent releases, no registry deprecation, a declared GPL-2.0-or-later license with license files, and no install-time lifecycle scripts. However, the assessment has meaningful transparency and maturity gaps because no source repository was declared, the artifact contains no tests or changelog, and repository maintenance signals could not be collected; the single registry maintainer is not evidence of actual development capacity. Overall, it is a caution-level dependency rather than an evidently abandoned or unfit package, but adoption should account for the limited verifiability and testing evidence.
70%
Total Score
50
90
100
The package declares 10 runtime dependencies, including TYPO3 components and mail, parsing, and rendering libraries. This is a meaningful integration surface but not excessive for the described backend mailing module; no dev dependencies are listed, which limits visible development context.
A README is present, but the artifact has no packaged tests or changelog, and no repository-side compensation was collected. For a sizeable backend module, this is a genuine maturity and verification gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ddeboer/imap Version ^1 | — | — |
typo3/cms-core Version ^13 || ^14 | — | — |
scssphp/scssphp Version ^1.13 | — | — |
masterminds/html5 Version ^2 | — | — |
pelago/emogrifier Version ^7 || ^8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.