This is a small but credible and usable package: it has an MIT license, a complete-looking 16-file artifact with tests, a matching and README-referencing repository, no install-time lifecycle scripts, a stable release, and no registry deprecation or repository archival. The main concerns are its short 214-day history, only three releases, zero commits and active maintainers in the last three months, zero repository popularity, and the absence of security scanning and a security policy. The latest release and repository push are current, which partly offsets the apparent recent inactivity, but the package remains a relatively young, single-user-backed dependency with limited evidence of long-term maintenance.
68%
Total Score
50
100
83
90
The repository is owned by an individual user rather than an organization, so the project has a narrow apparent ownership base and less visible organizational continuity.
The package is only 214 days old with three releases and a median interval of about 107 days, so its long-term maintenance record is still limited.
No commits or active maintainers were recorded in the last three months, which is a meaningful maintenance concern, although the current release and repository push provide some compensating evidence.
There is only one open issue and no new issues or pull requests in the last month; one pull request was merged, suggesting limited but not absent project interaction.
The repository has zero stars, forks, and watchers. Low popularity is not disqualifying for a focused addon, but it provides little supporting evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^5.63 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.