Usable with caveats: this is a clearly licensed, non-deprecated package with a small dependency footprint and active publication, but it is only two days old and has no tests, changelog, security policy, or demonstrated commit history. Treat it as an immature dependency until its maintenance record develops.
68%
Total Score
50
100
78
90
Only one registry publishing account is listed. That is a limited operational base for a user-owned project and increases continuity risk if the maintainer becomes unavailable.
A substantial README and documentation are present, but neither the package nor repository contains tests or a changelog. For a package that rewrites application output, the absence of tests leaves meaningful maintenance and regression risk.
The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the single-maintainer concern.
The package is only 2 days old with four releases, including rapid releases roughly every 30 minutes. This shows active initial publication but provides almost no long-term maintenance history.
The repository has no recorded commits or active maintainers in the last 3 months. Because the project is only 2 days old, this may reflect its age rather than abandonment, but it leaves no established maintenance record.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4 || ^14.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.