The release is clearly licensed, documented with a README, and has no install-time scripts. However, registry releases stopped about 8 years ago, repository commits have been absent for 3 months, and issue activity is inactive, leaving maintenance uncertain.
55%
Total Score
25
71
75
The latest release was published on 2018-08-03, about 8 years ago, with no releases in the last 12 months. This is strong evidence of a stagnant release line and raises compatibility and abandonment concerns.
The repository had zero commits and zero active maintainers in the last 3 months. Combined with the old registry release history, this indicates weak current maintenance.
There were no new or closed issues or pull requests in the last month, while 2 issues and 2 pull requests remain open. This suggests unresolved maintenance work and little recent project activity.
The repository has 8 stars, 7 forks, and 3 watchers. This is limited adoption evidence, but popularity is supporting context and does not by itself make a small package unsafe to depend on.
The repository uses Composer, but no security scanning tools were detected. The build tooling is appropriate for the package, while the missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ~4.1 | — | — |
ezyang/htmlpurifier Version ^4.10 | — | — |
silverstripe/framework Version ~4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.