This is a promising but still young package with strong evidence of active development: eight stable releases in 98 days, recent repository activity, a substantial test suite in the repository, clear documentation, changelog, licensing, and no deprecation or archive status. The main concerns are that all 24 recent commits come from one contributor, the repository has no security policy, and its GitHub Actions workflows declare no top-level token permissions. These issues reduce resilience and transparency, but the package appears actively maintained and technically structured enough to remain usable for developers who can accept the single-maintainer risk.
72%
Total Score
60
100
94
80
Only one account has registry publish access, but registry access reflects publishing permissions rather than actual maintenance capacity; repository activity confirms that this contributor is active, while the single-person project remains a resilience concern considered under repository bus factor.
The repository is owned by a personal user account rather than an organization, so there is no visible organizational maintenance backing to offset the concentrated contributor base.
One contributor made all 24 commits in the last three months, giving the project a complete single-contributor concentration and creating a meaningful continuity risk.
There is one newly opened issue in the last month and no issues or pull requests were closed, showing some engagement but limited evidence of issue-resolution throughput.
The repository has only 1 star, 0 forks, and 0 watchers, indicating limited external adoption or visibility. Popularity is supporting evidence rather than a health verdict, so this is only a mild concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4 || ^14.3 | — | — |
typo3/cms-scheduler Version ^13.4 || ^14.3 | — | — |
apache-solr-for-typo3/solr Version ^13.0 || ^14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.