The package is licensed and includes tests and a changelog, while its organization-owned repository is not archived. Its zero-star profile, absent security policy, and prerelease-only history add little confidence for long-term use.
40%
Total Score
50
50
63
75
The latest registry release was about 7 years ago, with only 4 releases overall and none in the last 12 months. This is strong evidence of abandonment risk for a production dependency.
There were no commits and no active maintainers in the last 3 months. Combined with the old latest registry release, this materially increases abandonment risk.
The package declares 8 runtime dependencies, including TYPO3, OrientDB, and several related project packages. This is a substantial integration surface, increasing maintenance exposure but not indicating severe risk by itself.
The repository name does not match the package name and its README does not mention the package. Because the repository provides no clear package identity linkage, this raises provenance and maintenance uncertainty.
The repository has 0 stars, 1 fork, and 1 watcher. Popularity is only supporting evidence, but these numbers provide little independent evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rkw/rkw-basics Version >=7.6.12 <=8.7.99 | — | — |
typo3/cms-core Version ^7.6.0 || ^8.7.0 | — | — |
rkw/rkw-authors Version >=7.6.10 <=8.7.99 | — | — |
rkw/rkw-projects Version >=7.6.10 <=8.7.99 | — | — |
rkw/rkw-geolocation Version >=7.6.10 <=8.7.99 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.