It is licensed, tested, actively released, and backed by an organization. Pin this beta deliberately because the source linkage and current maintenance evidence are weaker than the long release history suggests.
68%
Total Score
75
100
81
100
The repository recorded zero commits and zero active maintainers in the last 3 months. This is a current maintenance concern, despite the strong registry release history.
The repository name does not match the package name and its README does not mention the package. Although the README describes it as a read-only subsplit, this weakens confidence that the linked repository is the authoritative source for this exact package.
Composer is used for the build, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.
Version 9.2.0-beta6 is a prerelease, although the package is at a mature major version and only 20% of recent releases are prereleases. This warrants some caution for production use.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0 || ^3.0 | — | — |
neos/flow Version self.version | — | — |
neos/cache Version self.version | — | — |
typo3fluid/fluid Version ^2.8.0 | — | — |
neos/utility-files Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.