The project has only one recent commit and one active contributor, while its workflow uses one unpinned action and no security policy is present. It is otherwise clearly licensed, tested in the repository, recently released, and backed by an organization.
78%
Total Score
67
100
94
67
All recent commit activity comes from one contributor, creating a narrow observed maintenance base; organization backing provides some capacity to hand off maintenance.
Only one commit was recorded in the last three months, so current maintenance activity is thin despite the recent push and release.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.
The repository has no formal security policy. The README gives reporting guidance, but that does not fully replace a documented security process.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but its one action reference is unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/recipe-core Version ^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.