This release appears healthy and suitable to depend on: it is actively released, stable, non-deprecated, backed by a non-archived organization-owned repository, and supported by substantial recent commit, issue, pull-request, testing, release, and security-tooling activity. The main concerns are that all recent commits come from one contributor, the package runs a post-install script, packaged tests and a changelog are absent, and the GitHub workflows do not declare top-level permissions; however, repository tests, workflow analysis, security scanning, a security policy, and active organizational backing provide meaningful compensation. Dependency adoption is reasonable, with the usual need to review the post-install behavior and monitor the concentrated maintainer base.
82%
Total Score
90
100
94
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^4.4.4 | — | — |
typo3/cms-core Version ^13.4 || ^14.3 | — | — |
symfony/console Version ^7.0 || ^8.0 | — | — |
typo3/cms-fluid Version ^13.4 || ^14.3 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.