Automatic content translations for Neos using the DeepL Api
72%
Total Score
caution
Usable with caveats: frequent releases continue, but recent commit activity is absent and workflow actions are unpinned.
The repository reports zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although frequent releases and recent repository pushes provide some contrary evidence.
Composer build tooling is present, but no security scanning tools are reported. This is a modest transparency and hygiene gap rather than evidence of abandonment.
No repository security policy is published. For a package that handles API credentials and external translation services, this weakens vulnerability-reporting transparency.
The assessed release is marked stable and not a prerelease, with only 5% prereleases recently. The reported latest version, v2.8.0, does not match the assessed v3.3.2, which reduces confidence in this metadata.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving the build exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^9.0.0 | — | — |
deeplcom/deepl-php Version ~1.11.0 | — | — |
neos/http-factories Version ^9.0.0 | — | — |
neos/contentrepository-core Version ^9.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.