Package Health

remind/typo3-headless

The repository is active and the release includes tests and notes, but recent commit activity is absent and all six workflow actions are unpinned. Use remind/headless instead.

Latest v5.0.3PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package abandoned and names remind/headless as its replacement. This is a major adoption concern even though the repository and release history show recent activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful maintenance warning, although the recent push and release history provide some counterevidence.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. That is a transparency and hygiene gap for a dependency project.

Security policycaution

The repository has no security policy. This weakens disclosure transparency, though it is less serious than abandonment because the project has organizational backing and recent releases.

Workflow auditcaution

Both workflows were analyzed completely and have no dangerous triggers, untrusted checkouts, or audit findings. However, all 6 of 6 action references are unpinned, leaving workflow dependencies exposed to moving versions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

REMIND GmbH
David Mellen

Direct Dependencies

DependencyLast ReleaseScore
typo3/cms-core
Version ^13.4
—
—
friendsoftypo3/headless
Version ^4.6
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform