typo3/cms-sys-note

This is a mature, actively released TYPO3 extension with a substantial release history, stable versioning, clear licensing, a focused dependency profile, and organizational backing from the TYPO3 Core Team. The linked repository is active rather than archived, has recent commits from three contributors with no concentration risk, and contains tests even though tests are not packaged. The main reservations are limited repository security hygiene, including no declared security policy or security scanning, no changelog, and no recent issue or pull-request activity; these are meaningful transparency and process gaps but do not outweigh the strong maintenance and release evidence.

Latest v14.3.7

Packagist

88%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README, while tests and a changelog are absent from the artifact; however, the linked repository contains tests, which compensates for the missing packaged tests. The absent changelog remains a modest documentation gap.

Repo issue activity

There were no new or closed issues and no new or merged pull requests in the last month, suggesting limited visible issue-tracker activity. However, the package has frequent releases and recent commits, so this is a caution rather than abandonment evidence.

Repo tooling

Composer build tooling is present, supporting reproducible package structure, but no security-scanning tool was detected. The missing scanning is a process gap, though not evidence of unsafe behavior by itself.

Security policy

The linked repository has no security policy. This weakens vulnerability-reporting transparency and is a genuine hygiene gap, although it is not evidence that the package is unsafe or abandoned.