This release appears suitable to depend on, with strong basic hygiene and clear evidence of active early maintenance: it is licensed, non-deprecated, actively released, backed by a non-archived repository, and has repository tests, changelog, security policy, and restrictive CI permissions. The main concerns are that the package is very young at 18 days, repository activity is entirely concentrated in one contributor, and the repository has minimal popularity; these increase continuity risk but do not outweigh the recent release cadence and substantial documentation and project structure. Several other health dimensions were not collected, so this assessment should not be treated as fully conclusive.
78%
Total Score
60
100
83
100
Only one registry account, ViewMend, has publish access. This is a modest publishing continuity concern, although registry access records do not establish the actual development team and the repository provides direct backing.
The repository is owned by a user account rather than an organization, so there is no organizational handoff capacity to offset the concentrated maintainer base.
The package is only 18 days old, but it already has four releases with a median interval of about 3 days, showing active iteration while leaving long-term maintenance unproven.
All seven recent commits came from one contributor, phpner, giving the project a concentrated bus factor and increasing the risk that maintenance could stall if that contributor becomes unavailable.
There are no open issues or pull requests and no issue or pull-request activity in the last month. For a newly published package this is ambiguous rather than evidence of abandonment, though it provides little independent maintenance validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
viewmend/sdk Version ^1.0 | — | — |
typo3/cms-core Version ~13.4.0 || ~14.3.0 | — | — |
typo3/cms-fluid Version ~13.4.0 || ~14.3.0 | — | — |
typo3/cms-backend Version ~13.4.0 || ~14.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.