The repository has two active contributors, but nearly all recent commits come from one person. CI is fully audited, though all action references are unpinned and the publish workflow has high-confidence template-injection findings.
82%
Total Score
88
100
100
Only two contributors were active in the last three months, and one made about 98% of the 45 commits. Organization backing partly offsets this, but the recent work remains highly concentrated.
All seven workflows were analyzed with no untrusted checkouts or script injections, but all 15 action references are unpinned and the publish workflow has two high-confidence template-injection findings. These are meaningful CI hygiene and release-process concerns even without a dangerous trigger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ~13.4.34@dev || ~14.3.6@dev | — | — |
typo3/cms-fluid Version ~13.4.34@dev || ~14.3.6@dev | — | — |
typo3/cms-backend Version ~13.4.34@dev || ~14.3.6@dev | — | — |
typo3/cms-extbase Version ~13.4.34@dev || ~14.3.6@dev | — | — |
typo3/cms-install Version ~13.4.34@dev || ~14.3.6@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.