xima/xima-typo3-calendar

Documentation covers installation and use, and the current release includes clear notes. The organization-backed project is active, with a second contributor and ongoing issue and pull-request work, though security process and workflow pinning remain limited.

Latest 2.5.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

Two contributors are active, but one accounts for about 82% of recent commits. The organization-backed repository provides some handoff capacity, partly compensating for the concentration.

Repo tooling

Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a modest transparency and hygiene gap, not evidence of abandonment.

Security policy

The repository has no security policy. For a TYPO3 extension with backend, frontend, and notification functionality, this weakens the documented security-response path.

Workflow audit

All three workflows were analyzed with no reported audit findings, no untrusted checkout, and no top-level write permissions. However, all 13 action references are unpinned, leaving avoidable build-integrity risk.