This is a mature, actively released TYPO3 extension with 270 releases over roughly 9 years, 40 releases in the last 12 months, a stable non-prerelease version, clear GPL licensing, minimal runtime dependencies, and organization backing from TYPO3-CMS. The main concern is that the linked repository reports no commits or active maintainers in the last 3 months, despite the recent registry releases and a very recent repository push; this creates some uncertainty about where ongoing maintenance occurs. The repository also lacks tests, a changelog, security policy, and security scanning, although the very small extension artifact and absence of workflows limit the significance of some of those gaps. Overall, it is usable with moderate maintenance-transparency concerns rather than an abandonment-level risk.
74%
Total Score
75
100
88
90
A README is present, but neither the artifact nor the linked repository contains tests or a changelog. For this very small seven-file extension, the missing tests are a hygiene gap, while the README still documents the repository, issues, documentation, and Packagist locations.
The repository reports zero commits and zero active maintainers over the last 3 months, which is a meaningful transparency and maintenance concern. Recent registry releases and the very recent repository push partially offset the concern but do not explain the inactive three-month window.
There were no new or closed issues or pull requests in the last month, and issue counts are unavailable; this provides little evidence of active issue maintenance.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest hygiene gap rather than a severe risk on its own.
The repository has no security policy, reducing transparency for vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version 14.3.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.