typo3/cms-viewpage

This is a mature, actively released TYPO3 package with 270 releases since 2017, 40 releases in the last 12 months, a stable non-prerelease version, current repository activity, an unarchived organization-owned repository, and a clear GPL license. The package has a small runtime dependency surface and no install-time lifecycle scripts; its missing packaged tests and changelog are compensated by repository tests, while the main concerns are very low recent commit volume concentrated in one contributor and the absence of a security policy or security-scanning tooling. Overall, it appears suitable to depend on, with normal diligence around the narrow recent contributor activity.

Latest v14.3.7

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All 2 recent commits came from one contributor, creating a concentrated recent maintenance profile. The organization-owned TYPO3-CMS repository provides some capacity to hand off maintenance, but no second recent contributor is shown.

Repo commit activity

The repository recorded only 2 commits in the last 3 months, which is limited relative to the package's release history and warrants caution, although it still demonstrates some recent activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and assurance gap, though it is not by itself evidence of an unsafe release.

Security policy

The linked repository has no security policy, leaving vulnerability-reporting and response expectations less explicit than ideal.