Usable with caveats: it is backed by the Craft CMS organization, licensed, non-deprecated, and has a clean release process. However, the last release was over two years ago and the repository has had no commits in the last three months, so maintenance appears inactive.
65%
Total Score
67
100
83
88
The package has nine releases, but none in the last two years, with the latest published on March 22, 2024. This is a meaningful maintenance concern for a dependency, despite its earlier regular release interval.
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates limited current maintenance and lowers confidence in timely fixes.
There are no new or closed issues in the last month and two open pull requests. This is limited activity, but the small repository and absence of open issues make it supporting caution rather than a severe abandonment signal.
The repository has only three stars and one fork, indicating a small user and contributor footprint. Popularity is supporting evidence rather than decisive, especially given the organization's backing.
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency gap, not a standalone reason to reject the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^5.0.0-alpha.6 | — | — |
league/flysystem Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.