The package is small, focused, and easy to inspect, with a clear README, changelog, license declaration, and only one runtime dependency. Its source repository is not archived, but the project has had no new release for about 2 years and 8 months and provides no security policy.
58%
Total Score
67
100
89
83
One registry publishing account is listed. This is a limited publishing base, but the linked repository and matching namespace provide some backing context.
Only two releases exist, both published on the same day, with no release in about 2 years and 8 months. That materially raises maintenance and compatibility risk for a TYPO3 extension.
There are no open issues or pull requests and no recent activity. For a small package this is not proof of abandonment, but it provides little evidence of active community maintenance.
Composer is used as a build tool, which fits the package ecosystem, but no security scanning tooling is configured. This is a modest transparency gap rather than a severe risk.
The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's small scope and simple dependency profile partly limit the concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version >=10.0.0 <=11.5.99 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.