The repository includes tests and extensive documentation, with clear licensing and no install-time scripts. A single maintainer and no security policy or scanning leave limited evidence for long-term upkeep.
62%
Total Score
63
100
81
67
Only one registry account has publish access. That is a thin publishing base for a substantial extension and gives limited evidence of continuity if the maintainer becomes unavailable.
The source repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the single-maintainer position.
This is the first release, published today, so there is no release track record or demonstrated maintenance cadence yet.
There were no commits or active maintainers during the last three months, but the repository and package were created today, so this primarily reflects missing history rather than proven abandonment.
Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and upkeep gap, not a severe risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^14.0 | — | — |
typo3/cms-fluid Version ^14.0 | — | — |
typo3/cms-backend Version ^14.0 | — | — |
typo3/cms-extbase Version ^14.0 | — | — |
typo3/cms-filelist Version ^14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.