Modular and plug-in content management system
32%
Total Score
unhealthy
Risky: over six years without maintenance, plus a conflicting license declaration.
The package has had only two releases, both on May 12, 2020, with no releases in the last 12 months. This strongly indicates abandonment for a framework dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since May 2020.
The manifest declares MIT, but the artifact license file is detected as GPL-3.0; although a license file exists, the mismatch makes the terms unclear and needs resolution before adoption.
A README is included, but its installation and usage sections remain placeholder text such as “xxxx”; the absence of tests and a changelog is normal for a published artifact and is not penalized.
The repository name matches the package, which supports the link, but the README does not mention the package name. This weakens transparency about whether the repository is the intended source.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.