The source includes functional and unit tests, and the package declares GPL-2.0-or-later. A single maintainer, no security policy, and no security scanning limit review and response capacity.
56%
Total Score
50
100
78
83
This is the only release, published in January 2022, with no releases in about four years and eight months. That strongly suggests the package is no longer actively maintained.
Only one registry account can publish the package, leaving little visible publishing redundancy. The linked repository is also owned by an individual rather than an organization.
The package and repository are associated with an individual owner rather than an organization. That makes the single-maintainer finding more consequential because there is no shown organizational backing.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
The repository has zero stars and forks and one watcher. This provides little supporting evidence of external review or adoption, but popularity alone is not decisive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^10.4 || ^11.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.