Usable as a small Statamic add-on, but maintenance looks slow (no releases in the last 12 months and no recent repo commits). The package lacks tests/changelog in the artifact, and the GitHub Actions audit couldn’t analyze any workflows.
58%
Total Score
63
100
83
83
Only one maintainer is listed, which can be fine for small projects but increases single-person bus factor risk.
The artifact and repo include a README, but there are no tests or changelog files for this release; that’s common for small add-ons, but it reduces confidence in quality/changes.
This package has only 3 releases total and none in the last 12 months, indicating slow cadence rather than ongoing active maintenance.
No commits were observed in the last three months, which is consistent with a maintenance lull.
There are no open issues or PRs recorded and no new activity in the last month, which aligns with the slow maintenance signal rather than active bug-fixing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.