The tiny artifact has no README and the linked repository does not match the package name, making ownership and usage harder to verify. Its stable version and organization-backed repository help, but the long inactivity and absent license leave substantial adoption risk.
42%
Total Score
50
50
50
No license is declared, and no license file was found in either the package or repository. This is a significant transparency and adoption concern for an open-source dependency.
The latest release was over 3 years ago, with no releases in the last 12 months; the earlier median interval of about 47 days shows this is a genuine activity collapse rather than a consistently slow cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the extended release gap and indicating little current maintenance capacity.
The package runs post-install and post-update Composer scripts. These increase installation-time behavior and deserve review, but the signal alone does not show harmful behavior or make the release unfit.
The published artifact has no README, tests, or changelog, and the repository provides no such evidence either; while tests and changelogs need not ship in an artifact, the missing README weakens consumer guidance for this CMS integration.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
enjoyscms/core Version ^4.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.