Documentation and release notes make the small command straightforward to evaluate. The main concern is limited evidence of ongoing maintenance, while the license metadata deserves clarification before wider adoption.
68%
Total Score
50
83
100
A GPL-2.0 license file is present in both the artifact and repository, which is good transparency, but it differs from the manifest's GPL-2.0-or-later declaration and should be clarified.
The package has only one release, published about 10 months ago, so there is little release history to demonstrate sustained maintenance. Its single stable 1.0.0 release is still a positive maturity signal for a small utility.
The repository recorded no commits and no active maintainers in the last 3 months. This may reflect a stable, narrowly scoped tool, but it leaves limited evidence of responsive maintenance.
No GitHub Actions workflows were present, so this audit found no workflow risks or incomplete files. It also provides no positive evidence of automated build or security checks.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^7.2 | — | — |
typo3/cms-core Version ^14.0 || ^13.4 || dev-main | — | — |
symfony/console Version ^7.2 | — | — |
typo3/cms-fluid Version ^14.0 || ^13.4 || dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.