Documentation, tests in the repository, licensing, and release notes provide good transparency. The small user-owned project has little community activity, so maintenance depends heavily on its single active maintainer.
65%
Total Score
67
100
81
83
One registry maintainer is a thin publishing base, though the linked repository is owned by the same individual, so this is a modest capacity concern rather than evidence of abandonment.
Six releases arrived within about one day, showing initial activity but not yet an established maintenance cadence; the package is only about six months old.
The repository recorded 0 commits and 0 active maintainers over the last three months, which is a meaningful maintenance and abandonment concern for a project released only recently.
The repository has 1 star, 0 forks, and 0 watchers, so there is little external adoption evidence. Popularity is supporting evidence rather than a standalone health verdict.
Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a modest process gap, not proof of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4 || ^13.0 || ^14.0 | — | — |
typo3/cms-backend Version ^12.4 || ^13.0 || ^14.0 | — | — |
typo3/cms-dashboard Version ^12.4 || ^13.0 || ^14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.