Package Health/skilldisplay/typo3-skilldisplay

skilldisplay/typo3-skilldisplay

Usable with caveats, but it appears effectively unmaintained: the last release and repository push were about three years ago, with no recent commits. The package has tests, documentation, a stable version, and a clear license, but the repository does not clearly identify this package and lacks basic security-policy coverage.

Latest v3.0.2

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates a strong risk of abandonment.

Release history

The package has 9 releases since December 2020, but none in the last 12 months and the latest release was about three years ago. That long release gap is a meaningful maintenance concern.

Repo package mention

The repository name does not match the package name and its README does not mention the package. That makes the repository-to-package relationship less transparent and warrants caution.

Repo tooling

The repository uses Composer, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy. For an extension that integrates with an external SkillDisplay API, the absence of documented vulnerability handling is a meaningful transparency gap.