The source includes tests, a changelog, security policy, and signed release notes. Organization backing and read-only workflow permissions help, but action pinning is weak and the project has no established release track record.
68%
Total Score
83
86
83
This is the package's first release, published today, so there is no history showing sustained maintenance or release reliability.
All 16 recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk.
The v0.1.0 version is not a stable major release, which adds some maturity uncertainty for adopters.
All four workflows were analyzed, use read-only permissions, and have no reported audit findings. However, 12 of 13 action references are unpinned, leaving the build exposed to action changes over time.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4 || ^14.3 | — | — |
typo3/cms-backend Version ^13.4 || ^14.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.