Package Health

bseries/cms_post

A clear license and organization-owned repository make provenance easier to assess. The package is best treated as legacy software, with no releases since July 2018 and no repository commits for roughly seven years.

Latest v1.5.2PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has had no releases in the last 12 months, and its latest release was in July 2018. This long release gap is strong evidence of abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in August 2019. That supports the conclusion that maintenance has effectively stopped.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these figures provide little evidence of an active user or contributor community.

Repo toolingcaution

Composer is used for builds, which is appropriate for this package, but no repository security scanning tools were detected. The missing scanning is a modest hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, although it is less serious than the package's prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
bseries/base_tag
Version ^1.5
bseries/cms_core
Version ^1.5
bseries/base_core
Version ^1.5
bseries/base_media
Version ^1.5
unionofrad/lithium
Version ^1.2

Weekly Downloads

Info

Last Published
8 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform