cmsgears/module-core
The package is licensed, has a usable README, and comes from a matching organization repository. Its small dependency set and lack of install scripts reduce exposure, but the project offers no recent maintenance or security policy.
43%
Total Score
50
100
71
75
Health Score Breakdown
The latest release was over four years ago, with no releases in the last 12 months and only nine releases across the package's lifetime. This is strong evidence of abandonment risk.
There were no commits or active maintainers in the last three months. Combined with the old last push, this supports a substantial maintenance and abandonment concern.
Composer is used as the build tool, but no security scanning tools are configured. The build setup is appropriate, while the missing scanning is a minor hygiene gap.
The repository has no security policy. This is a transparency and maintenance gap for a core web application module, though it is less severe than the lack of recent development.
The assessed version is still marked alpha, and all recent releases are prereleases. That indicates limited maturity and makes long-term compatibility less certain.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version 2.0.40 | — | — |
yiisoft/yii2-swiftmailer Version 2.1.* | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.