It has clear licensing, a matching repository, and a small runtime dependency footprint. The organization-backed project is not archived, but recent maintenance and security-policy coverage are limited.
68%
Total Score
75
100
92
75
The package has 13 releases since April 2016, but none in the last 12 months; its latest release was in August 2025. This indicates a meaningful maintenance slowdown for a dependency, though the long release history shows the project is established.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. That weakens evidence of current maintenance, although it does not by itself establish abandonment.
The linked repository has no security policy. For a small package with a limited file tree this is a transparency gap, but it is less significant than absent maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/assets Version ^3 | — | — |
silverstripe/framework Version ^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.