The release has clear documentation, licensing, and recent repository activity from two contributors. Its package-level deprecation and archived repository make continued maintenance and future support too uncertain for a new dependency.
18%
Total Score
75
50
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future maintenance and support are explicitly uncertain.
The package has 13 releases since October 2019, but no releases in the last 12 months and its latest release was about 2 years and 4 months ago. The repository's recent commits do not compensate for the lack of current registry releases.
The linked repository is archived, which is a severe abandonment signal even though it was pushed recently. An archived project should not be treated as an actively maintained dependency.
Two commits by two active maintainers were recorded in the last 3 months, showing some current repository activity. This is limited compensation and does not overcome the archived repository or package deprecation.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is an additional transparency gap for a package already carrying strong abandonment signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.1 || dev-main | — | — |
typo3/cms-fluid Version ^13.1 || dev-main | — | — |
typo3/cms-backend Version ^13.1 || dev-main | — | — |
typo3/cms-extbase Version ^13.1 || dev-main | — | — |
typo3/cms-install Version ^13.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.