Package Health

typo3/cms-scheduler

This is a healthy, mature release with a long publication history, frequent recent releases, stable versioning, an active non-archived organizational repository, and distributed recent contribution activity. The package is clearly structured and documented, its repository contains tests, it has a valid GPL license, and it avoids install-time lifecycle scripts. The main concerns are the absence of a repository security policy and security-scanning tooling, plus limited repository popularity; these are transparency and defense-in-depth gaps rather than evidence of abandonment. Several other signals were not collected, so confidence is high but not maximal.

Latest v14.3.7PackagistPackagist

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Are you affected? Scan for Free

Health Score Breakdown

Repo popularitycaution

The repository has only 16 stars and 1 fork, which is limited supporting adoption evidence, though popularity is not decisive and the package has strong release and maintenance evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a defense-in-depth gap for supply-chain transparency.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Vulnerabilities

TitleVersionsSeverity
CVE-2024-55924
typo3/cms-scheduler is vulnerable to Cross-Site Request Forgery (CSRF) in versions 11.0.0 - 11.5.41.
11.0.0 - 11.5.41
High

Package versions

Maintainers

TYPO3 Core Team

Direct Dependencies

DependencyLast ReleaseScore
typo3/cms-core
Version 14.3.7

Weekly Downloads

Info

Last Published
12 days ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform