nitsan/ns-news-comments

This is a mature, actively released TYPO3 extension with 32 releases since 2019, a stable current version, a non-deprecated registry entry, a matching and recently updated source repository, and clear licensing and documentation. The main concerns are that all five commits in the last 3 months came from one contributor, the repository has no security scanning or security policy, the package and repository contain no tests or changelog, and its release workflow does not declare top-level token permissions. These are meaningful transparency and resilience gaps, but they do not outweigh the evidence of ongoing maintenance and a coherent package structure; it appears usable with normal dependency and release-review precautions.

Latest 14.0.2

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README and extensive documentation are present, and GitHub Releases are used, but neither the artifact nor repository contains tests or a changelog. The documentation and release process partly compensate for the missing changelog, while the absence of tests remains a maintenance-quality gap.

Repo bus factor

One contributor made all five commits in the last 3 months, producing a 100% top-contributor share. Because the backing owner is classified as a User rather than an organization, there is no provided organizational handoff evidence to compensate for this concentration.

Repo issue activity

There are 2 open issues and 2 open pull requests; activity in the last month includes one new and one merged pull request, but no issues were closed. This suggests some engagement while leaving a small unresolved backlog.

Repo popularity

The repository has 4 stars and 10 forks, indicating limited popularity. This is only supporting evidence and does not outweigh the package's release and repository activity.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. Build tooling supports reproducible project structure, while the missing security tooling is a transparency gap.