This is a licensed, stable, non-deprecated TYPO3 extension with a repository that matches the package and is backed by an organization. Its small release history and absence of commits or active maintainers in the last 3 months indicate limited maintenance capacity, while the lack of tests, security scanning, and security policy reduces transparency and assurance. The latest release and recent repository push are reassuring, but the package is best treated as usable with moderate maintenance and verification concerns rather than as a highly mature dependency.
72%
Total Score
67
100
78
90
A substantive README is present, but the artifact and repository contain no tests or changelog. For a small TypoScript-focused extension this is a genuine transparency and maintenance gap, though the README provides useful usage documentation.
The package has existed for 2049 days with 7 releases, but only 1 release in the last 12 months and a median interval of about 185 days indicate a relatively slow maintenance cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the slow release cadence, this is a meaningful maintenance-risk signal, although the recent release and repository push partly mitigate abandonment concerns.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with a small, quiet project, but it provides little evidence of active community maintenance.
The repository has 1 star, 0 forks, and 1 watcher. Low popularity is supporting evidence of limited adoption, but it is not by itself evidence that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^11 || ^12 || ^13 || ^14 | — | — |
typo3/cms-backend Version ^11 || ^12 || ^13 || ^14 | — | — |
typo3/cms-fluid-styled-content Version ^11 || ^12 || ^13 || ^14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.