OpenID Connect server for TYPO3.
51%
Total Score
25
93
50
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and raising abandonment risk.
The package runs a post-autoload-dump install-time script. This adds execution during installation, although the signal does not show that the script is harmful.
The package has only 4 releases over about 5.5 years, with no releases in the last 12 months and a median interval of about 19 months. This indicates a slow maintenance cadence.
There were no new or closed issues or pull requests in the last month, while 4 issues and 1 pull request remain open. This provides no evidence of current issue handling.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The package's security-sensitive OIDC role makes this a meaningful transparency gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4 || ^13.4 | — | — |
r3h6/oauth2-server Version ^2.0 | — | — |
steverhoades/oauth2-openid-connect-server Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.