It includes tests, a README, a substantial file tree, and only two runtime dependencies, which supports adoption. The repository could not be found, so current maintenance and source provenance cannot be checked.
45%
Total Score
100
70
100
The package has 17 releases since August 2018, but its latest release was over five years ago and there were no releases in the last 12 months, indicating a substantial maintenance risk.
The manifest declares GPL-2.0+, while the artifact license file was detected as MIT. A license is present, but the mismatch creates meaningful uncertainty about the terms consumers receive.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^9 || ^10.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.