typo3/minimal

Name lookalikedanger

The package resembles typo3/html-sanitizer and borrows its lookalike identity, while the lookalike has substantially more monthly downloads and stable releases. The zero artifact overlap reduces copy evidence, but the identity signal remains severe.

Release historycaution

The package has existed for about 9 years with 28 releases, but only 2 releases in the last 12 months and a median interval of about 70 days indicate a modest cadence.

Repo commit activitycaution

The repository has no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern, although the recent release and organization backing provide some compensation.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. The missing scanner is a hygiene gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This lowers transparency but is not by itself evidence of abandonment.