This is a mature, actively released TYPO3 extension with a long release history, stable versioning, current publication activity, an unarchived organization-owned repository, and three active contributors in the last three months. The artifact is licensed, has a coherent 60-file implementation and documentation tree, uses no install-time lifecycle scripts, and has a narrow runtime dependency profile. The main reservations are the absence of a repository security policy and security-scanning tooling, limited recent commit volume, no recent issue or pull-request activity, and no changelog; however, repository tests compensate for the artifact's missing packaged tests, and the organization backing reduces concern from the single registry maintainer and concentrated commit share.
88%
Total Score
80
100
89
90
The artifact includes a README but no packaged tests or changelog; the linked repository does contain tests, which compensates for the missing packaged tests, while the absent changelog is a modest documentation gap.
The top contributor made about 71% of the seven recent commits, which indicates concentration; however, two additional contributors remained active and the repository is organization-owned, providing some handoff capacity.
There were no new or closed issues or pull requests in the last month, and issue counts are unavailable. This leaves recent community activity unverified and is a modest maintenance-signal gap, though it is outweighed by the active release history and recent commits.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a transparency and assurance gap, not a standalone health verdict.
The linked repository has no security policy, reducing transparency around vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version 14.3.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.