A clear GPL license, useful README, and no install scripts make the package easier to adopt. Its small repository footprint and lack of security tooling leave little additional assurance.
40%
Total Score
25
63
75
The latest release was in March 2018, with no releases in the last 12 months despite the package being about eight years old. This is strong evidence of abandonment risk, although the package is not deprecated.
The repository recorded no commits and no active maintainers in the last three months, and its last push was about six years ago. That indicates little current maintenance capacity.
There were no new or closed issues in the last month and one open pull request, suggesting limited ongoing project activity. This reinforces the maintenance concern but is weaker than the release and commit history.
The repository has 1 star, 2 forks, and 1 watcher. Low popularity is only supporting evidence, but it provides little community signal to offset the lack of maintenance.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less serious than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ^4@dev | — | — |
silverstripe/framework Version ^4@dev | — | — |
silverstripe/vendor-plugin Version ^1.0 | — | — |
undefinedoffset/sortablegridfield Version dev-master | — | — |
colymba/gridfield-bulk-editing-tools Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.