The package is clearly identified, MIT-licensed, documented, and has no install-time scripts. Its only release was over six years ago and the repository has had no recent commits, making ongoing compatibility and maintenance uncertain; pinning 1.0.0 is prudent.
43%
Total Score
25
100
75
83
This package has only one release, published over six years ago, with no releases in the last 12 months. That leaves little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and a meaningful abandonment concern.
There is one registry maintainer, matching the user-owned repository. A single maintainer is a limited continuity base, especially alongside the absence of recent activity.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide no supporting evidence of community adoption or backup maintenance.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. This is a minor hygiene gap rather than a primary adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.