The project has clear licensing, a usable README, and a small dependency set. Its workflow has no detected audit findings, though missing security scanning and a single active contributor leave less resilience.
68%
Total Score
83
100
88
50
The post-create-project-cmd lifecycle script runs package setup behavior after project creation, adding some execution surface for consumers.
The package has 61 releases over 991 days and a release as recently as July 6, 2026, but only one release in the last 12 months indicates a slower current cadence.
One contributor made all 16 recent commits, creating a concentrated maintenance dependency despite the repository being organization-owned.
Composer is used for builds, but no security scanning tools were detected, leaving automated security coverage limited.
The repository has no security policy, which reduces transparency about vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cecil/theme-hyde Version ^2.7 | — | — |
cecil/theme-garth Version ^1.11 | — | — |
cecil/theme-netlify Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.