The project has clear documentation, an active organization owner, and a security policy. Its short release history and reliance on one recent contributor leave maintenance continuity less proven.
68%
Total Score
75
88
83
A post-install command runs during installation, adding execution surface and requiring more trust than a package without install-time scripts.
This package is about three months old and has only one release, so its long-term maintenance and release discipline are not yet demonstrated.
One contributor made all ten recent commits, creating a clear continuity risk; organization backing partly compensates because maintenance can potentially be handed off.
Ten commits were made in the last three months, but activity is concentrated in a single active maintainer, limiting evidence of durable maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and monitoring gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4 || ^14.0 | — | — |
typo3/cms-form Version ^13.4 || ^14.0 | — | — |
typo3/cms-extbase Version ^13.4 || ^14.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.