Package Health

netresearch/rte-ckeditor-image

Documentation is extensive, and the release includes concrete notes and repository tests. The organization backs the project, but recent commits come from one contributor and most workflow actions are unpinned, so maintenance resilience and build reproducibility are weaker.

Latest v13.10.2PackagistPackagist

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

One contributor made 100% of the 38 recent commits. Although the organization-owned project can provide handoff capacity, no second active contributor is shown, leaving a meaningful continuity risk.

Repo commit activitycaution

There were 38 commits in the last three months, showing strong activity, but all were made by one active maintainer. The volume is healthy while the concentration limits resilience.

Workflow auditcaution

All 10 workflows were analyzed, use read-only permissions, and had no reported audit findings or unsafe checkout and script-injection sinks. However, 21 of 22 action references are unpinned, which weakens build reproducibility despite the otherwise good workflow controls.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-10102 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
netresearch/rte-ckeditor-image is vulnerable to Cross-site Scripting (XSS) in versions 0.0.1 - 13.3.2.
0.0.1 - 13.3.2
Medium

Package versions

Maintainers

Netresearch DTT GmbH
Sebastian Koschel
Sebastian Mendel
Rico Sonntag

Direct Dependencies

DependencyLast ReleaseScore
typo3/cms-core
Version ^13.4.21 || ^14.3
typo3/cms-backend
Version ^13.4.21 || ^14.3
typo3/cms-extbase
Version ^13.4.21 || ^14.3
typo3/cms-frontend
Version ^13.4.21 || ^14.3
typo3/cms-rte-ckeditor
Version ^13.4.21 || ^14.3

Weekly Downloads

Info

Last Published
1 month ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform