The package includes a README, an explicit license, and only two runtime dependencies. The repository could not be found, leaving maintenance and provenance unverified; pin this version only if its behavior is already known.
57%
Total Score
100
80
The artifact contains a recognised GPL-2.0 license file and declares GPL-2.0-or-later. The narrower detected text differs from the declaration, creating a modest licensing ambiguity.
The package has only two releases and none in the last 12 months, with the latest release more than a year ago. This indicates uncertain ongoing maintenance, though it does not establish abandonment alone.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.