42%
Total Score
33
75
75
This is the only release, published over three years ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance or compatibility work.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is strong evidence of abandonment risk.
The manifest declares a proprietary license, so the release is licensed but may restrict redistribution or use in dependent projects. No license file was detected to clarify those terms.
Only one account has registry publish access. That is a thin publishing base for a user-owned project and increases continuity risk if that maintainer becomes unavailable.
The repository is owned by a user rather than an organization, so there is no organizational backing signal to compensate for the thin maintainer base or stalled activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^6.0 | — | — |
typo3/cms-core Version ^11.5 | — | — |
typo3/cms-backend Version ^11.5 | — | — |
typo3/cms-install Version ^11.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.