typo3/cms-recordlist

The package is clearly licensed, documented, and backed by an organization. Its repository and registry show no activity since October 2024, and the linked repository does not identify the package in its README, so maintenance and provenance deserve caution.

Latest v11.5.41

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates currently stalled maintenance.

Release history

The package has 161 releases since October 2017, but none in the last 12 months and its latest release was October 15, 2024. The long release history shows maturity, while the current inactivity raises a maintenance concern.

Repo issue activity

There were no new or closed issues and no new or merged pull requests in the last month. With no recent commits either, this adds evidence of inactivity, though issue counts themselves are incomplete because the open totals are unknown.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package. Although the package README points to the TYPO3 repository, this mismatch leaves provenance less clear and warrants caution.

Repo tooling

The repository uses Composer, confirming project build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than proof of unsafe code.