Risky to adopt: the package has had no release or repository activity for over eight years, with 19 open issues and no active maintainers recently. It is licensed and has a matching, structured source repository, but the maintenance gap is a serious liability.
38%
Total Score
38
100
72
88
The latest release was published in May 2018, and there have been no releases in the last 12 months despite the package being over eight years old. This indicates severe abandonment risk.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since the latest release. This is a major maintenance concern.
Only one registry account has publishing access. The matching personal repository provides some ownership clarity, but the single-person publishing base increases continuity risk.
The package is backed by a matching personal repository rather than an organization. That gives source transparency but provides limited institutional continuity.
The repository has 19 open issues, while no issues or pull requests were created or closed in the last month. The unresolved backlog and inactivity reduce confidence that defects will be addressed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^7.6 || ^8.7 || >=9.0 <9.3 | — | — |
typo3/cms-extbase Version ^7.6 || ^8.7 || >=9.0 <9.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.