This is a usable, transparently packaged dependency with a long release history, a stable 2.0.0 release, an MIT license, documentation, changelog, and no registry deprecation or install-time scripts. However, the repository has had no commits or active maintainers in the last 3 months, has no tests, security scanning, or security policy, and shows very limited community adoption; the single registry maintainer also indicates a narrow maintenance base. The recent release and unarchived repository provide some reassurance, but the package is best treated as a caution-level dependency requiring monitoring and validation against the target Silverstripe version.
68%
Total Score
50
100
83
90
Only one account has registry publish access, which creates a narrow publishing base. The linked repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset this concern.
A README and changelog are present, and the repository uses GitHub Releases, which support transparency. Neither the artifact nor repository contains tests, leaving validation coverage as a maintenance gap.
The repository is owned by an individual user, not an organization, so the package lacks demonstrated organizational backing. This increases reliance on the narrow maintainer base.
The repository recorded zero commits and zero active maintainers in the last 3 months, indicating a current maintenance gap. The recent release and repository push reduce the severity but do not demonstrate sustained development activity.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is neutral for a quiet focused package, but it provides no evidence of an engaged contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.