undkonsorten/taskqueue

Recent releases and 43 commits in the past three months show active maintenance, with two active contributors and organization backing. The package includes tests, documentation, and a clear GPL-2.0+ declaration. Install scripts and the lack of a security policy add operational overhead.

Latest 9.6.2

Packagist

68%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs post-install and post-update Composer scripts. These increase installation complexity and execution exposure, although the signal does not show that the scripts are unsafe.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for a package intended to run in TYPO3 installations.

Workflow audit

The audit analyzed both workflows and found no untrusted checkout or script-injection trigger, but all 14 action references are unpinned, weakening build reproducibility. It also found a high-confidence template-injection issue in publish.yml; template injection alone is a workflow hygiene concern, not a standalone severe verdict.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Eike Starkmann

Thomas Alboth

Direct Dependencies

Dependency	Last Release	Score
typo3/cms-core Version ^13.4 \|\| ^14.3	—	—
symfony/console Version ^5.4 \|\| ^6.0 \|\| ^7	—	—
typo3/cms-backend Version ^13.4 \|\| ^14.3	—	—
typo3/cms-extbase Version ^13.4 \|\| ^14.3	—	—