typo3/cms-backend

typo3/cms-backend v14.3.7 appears to be a healthy, mature dependency. It has a long release history beginning in 2017, 270 releases including 40 in the last 12 months, a stable non-prerelease version, no registry deprecation, active recent repository work, and 19 contributors with limited concentration of commits. The package is backed by the TYPO3-CMS organization, is licensed under GPL-2.0-or-later, and has substantial source and artifact contents. The main reservations are the absence of a repository security policy and security-scanning tooling, plus no changelog in the collected package or repository metadata; these are transparency and assurance gaps, but they are outweighed by the strong release and maintenance evidence.

Latest v14.3.7Packagist

Health Score Breakdown

Repo toolingcaution

Composer build tooling is present, supporting reproducible project conventions, but no security-scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, which weakens vulnerability-reporting transparency for a security-sensitive backend component.

View all 19 health checks

Maintainers

TYPO3 Core Team

Direct Dependencies

Dependency	Last Release	Score
typo3/cms-core Version 14.3.7	—	—
psr/event-dispatcher Version ^1.0	—	—