This is a usable and transparently packaged release with a clear GPL-2.0-or-later license, substantial documentation, a changelog, repository tests, a coherent file tree, stable versioning, and recent release and repository activity. However, the project is very young at 33 days, has only four commits in the last three months from one active contributor, has no repository security policy or security scanning, and has no observable adoption signal yet. These factors create meaningful maintenance and continuity risk, but the package is not deprecated or archived and the available evidence does not indicate that it is unfit to depend on.
68%
Total Score
50
100
83
90
The repository owner is classified as a User rather than an organization, so the single-contributor pattern is not compensated by visible organization backing.
Five releases in 33 days, with a median interval of about 2.5 days and a release as recently as the collection date, show active early development; the short history limits maturity evidence.
One contributor made all four commits in the last three months, creating a concentrated maintenance dependency without evidence of a backup contributor.
The repository has four commits in the last three months, showing recent work, but only one active maintainer performed it, limiting evidence of sustained maintenance capacity.
There are no open issues or pull requests and no activity in the last month; this may reflect a small or new project, but it also provides little evidence of an active user or maintainer feedback loop.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4 || ^13.4 || ^14.3 | — | — |
typo3/cms-extbase Version ^12.4 || ^13.4 || ^14.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.