The small maintainer base and one recent commit leave limited backup if development stops. Clear licensing, a current stable release, recent publishing, and no install scripts provide useful reassurance.
68%
Total Score
60
100
88
88
Only one registry account can publish releases, which concentrates publishing responsibility; the linked repository is user-owned rather than organization-owned, so there is no provided backing evidence to offset this.
The repository owner is a user account rather than an organization, so the concentrated maintainer and commit activity is not offset by explicit organizational backing.
All recent commits came from one contributor, leaving the project dependent on a single active maintainer and increasing abandonment risk.
The repository had only 1 commit in the last 3 months from 1 active maintainer, indicating limited recent development activity despite the package having a recent release.
The repository has 0 stars and 0 forks, indicating little community adoption; popularity is supporting evidence only and does not outweigh the direct maintenance signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/ignition Version ^1.14 | — | — |
goldfinch/service Version ^2.0 | — | — |
silverstripe/admin Version ^2.0 | — | — |
silverstripe/framework Version ^5.0 | — | — |
silverstripe/linkfield Version ^3 || ^4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.