Package Health

biffbangpow/silverstripe-flashmessage-extension

The repository remains linked, unarchived, and builds with Composer, with only one runtime dependency. Its README is just 25 characters, and no security tooling or policy is present.

Latest v1.0.1PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Package scaffoldingcaution

The artifact includes a README and a GitHub release for this version, but the README is only 25 characters long. The absence of tests and a changelog in the published artifact is normal packaging practice and is not a concern here.

Release historycaution

The package has only 3 releases since May 2021, with no releases in the last 12 months and a median interval of about 728 days. This indicates a slow maintenance cadence, though the latest release is relatively recent.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. With no recent release activity to offset this, ongoing maintenance capacity is uncertain.

Repo toolingcaution

The repository uses Composer, which supports reproducible project management, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The linked repository has no security policy. For a small extension this is a limited gap, but it provides no documented path for reporting vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tim Burt
James Heathcote

Direct Dependencies

DependencyLast ReleaseScore
silverstripe/cms
Version ^4|^5

Weekly Downloads

Info

Last Published
1 year ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform