The small codebase has a clear README and minimal runtime dependencies. Its one-person ownership and no commits in the last three months limit maintenance confidence; no security policy is documented.
64%
Total Score
50
100
83
83
Only one registry account has publishing access, leaving a thin publishing base. The linked project is user-owned rather than organization-backed, so there is no provided evidence of broader maintenance capacity.
The repository owner is a user account, not an organization, and no broader project backing is shown. This modestly limits evidence of maintenance capacity.
The package has only two releases across 887 days, with one release in the last 12 months; this indicates a small and infrequent release history, though the latest release is recent.
The repository recorded zero commits and zero active maintainers in the last three months, which lowers confidence in ongoing maintenance after the latest release.
The repository has 1 star, 1 fork, and 1 watcher, showing very limited community adoption. Popularity is supporting evidence only, and the package can still be suitable for its narrow purpose.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.