The six-file module has clear ownership, a matching repository, and no install-time scripts. Its small scope helps, but the package still lacks licensing information and shows no recent development activity.
57%
Total Score
75
100
86
88
No declared license, license file, or repository license file was found, leaving the terms for using this dependency unclear.
Only two releases exist, with no release in the last 12 months; the latest release was about 20 months ago. This suggests limited ongoing maintenance, though the package is not deprecated.
There were no commits and no active maintainers in the last three months, consistent with the absence of releases in the last year and indicating stalled maintenance.
The repository has no security policy. This is a transparency and response-process gap, although the package's small scope and lack of workflow automation limit its weight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ^4 || ^5 | — | — |
silverstripe/framework Version ^4 || ^5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.