mittwald/mw-cache-widget

It has a clear README, a GPL-2.0 license, organizational ownership, and no install-time scripts or deprecation. Maintenance has stopped since March 2025, while the repository lacks a security policy and pins none of its three workflow actions.

Latest 3.1.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only four releases since January 2022, with no releases in the last 12 months and a median interval of about 563 days. This indicates a slow maintenance cadence, though the latest release is stable and the repository was pushed at the same time.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the absence of recent registry releases. The repository is not archived, so this is a maintenance concern rather than evidence of abandonment on its own.

Security policy

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap for a package integrated into TYPO3 applications.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. The missing top-level permissions block is acceptable here because the workflow grants no top-level write access.