typo3/cms-styleguide

This release appears to be a healthy dependency: it has a long release history dating back to 2015, 31 releases in the last 12 months, a stable non-prerelease version, active and diverse recent repository contributions, organizational backing from TYPO3-CMS, and no deprecation or archive status. The package is properly licensed and has a clear artifact structure; the absence of packaged tests and a changelog is compensated by repository tests and GitHub Releases. The main transparency concern is that the linked repository neither matches the package name exactly nor mentions the package in its README, and the repository has no security policy, but these do not outweigh the strong maintenance and project-backing evidence.

Latest v14.3.7

Packagist

88%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo issue activity

There were no new or closed issues or pull requests in the last month, and issue counts are unavailable; this is limited evidence and mildly reduces observability, but is outweighed by recent commits and releases.

Repo package mention

The repository name does not match the package name and its README does not mention the package, creating a transparency concern about the exact package-to-repository relationship; organizational backing and the substantial matching styleguide implementation partly mitigate this concern.

Repo tooling

Composer build tooling is present. No security scanning tools were detected, which is a hygiene gap, but it is not sufficient on its own to indicate poor package health.

Security policy

The repository has no security policy, which reduces vulnerability-reporting transparency and is a genuine but limited governance gap.