This is a healthy, mature release suitable for dependency use: it has been published since 2017 with 270 releases, 40 releases in the last 12 months, a stable non-prerelease version, current repository activity, six active contributors, organizational backing from TYPO3, and no deprecation or archive indicators. The package is licensed, has a substantial documented file tree, minimal runtime dependencies, and no install-time scripts. The main reservations are the absence of a repository security policy and security-scanning tooling, zero recent issue or pull-request activity, and relatively low repository popularity; these are transparency and process gaps rather than evidence of abandonment, given the recent release and commit history.
88%
Total Score
90
100
94
90
There were no new or closed issues or pull requests in the last month, and issue totals are unavailable; this is a modest activity-visibility gap, although recent commits and releases show ongoing maintenance.
Composer build tooling is present, but no security-scanning tools were detected. This is a process gap, though it is not evidence of abandonment or unsafe behavior on its own.
The linked repository has no security policy, which reduces disclosure transparency and incident-response visibility for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version 14.3.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.