The source repository matches the package, remains available, and provides a useful README with a clear BSD-3-Clause license. No security policy or automated security scanning is present, leaving maintenance and disclosure practices less transparent.
52%
Total Score
33
100
75
75
The package has only one registry release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of limited ongoing maintenance, although the repository was pushed more recently.
There were zero commits and zero active maintainers in the last three months. Combined with the single old registry release, this indicates a meaningful risk of stalled maintenance.
The registry namespace and repository are owned by the same individual account. This confirms ownership alignment but provides limited organizational backing for long-term maintenance.
The repository has six open issues and two open pull requests, but recorded activity in the last month is zero for both issues and pull requests. This supports the maintenance concern without proving abandonment by itself.
Composer is used as a build tool, but no security scanning tool is configured. The missing scanning reduces repository hygiene and transparency, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ~3.0 | — | — |
silverstripe-australia/gridfieldextensions Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.