The repository has a clear package structure, an explicit GPL license, and no install-time scripts. Its alpha status, nearly five years without a release, and zero recent commits make future maintenance uncertain; missing security tooling adds concern.
39%
Total Score
50
100
63
75
The latest release was published nearly five years ago, with no releases in the last 12 months and only nine releases over the package's lifetime. This is strong evidence of stalled maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is strong evidence that maintenance has stopped.
One registry account has publish access, but the repository is organization-owned, so a short registry maintainer list is not by itself concerning. It still provides little evidence of an active maintainer base.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with a dormant project, though it does not prove unresolved maintenance problems.
The repository has zero stars and forks and only three watchers. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful external adoption signal.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
cmsgears/module-core Version * | — | — |
cmsgears/module-payment Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.