The repository is clearly tied to the package, includes a README and changelog, and uses security scanning. Treat it as an early-stage dependency and expect API or maintenance changes.
65%
Total Score
83
86
50
The package is only 9 days old, with four releases and a median interval of about 1 day, so maintenance quality and long-term stability are not yet established. The recent activity is encouraging but too brief to offset the project’s limited history.
All three recent commits came from one contributor, leaving maintenance concentrated. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene and maintenance concern, not evidence that the package is unsafe.
The assessed version is a prerelease, and all recent releases are prereleases, indicating the API may still change. The stable major number provides some context, but does not make this beta release mature.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.