The MIT license, readable README, and matching repository make the package straightforward to understand and integrate. Its single maintainer and absent security policy leave limited visible support.
58%
Total Score
33
50
75
50
The package has had no release in over two years, despite 14 releases during its initial period. This is a meaningful maintenance and abandonment concern.
There were zero commits and zero active maintainers in the last three months, consistent with more than two years since the last release. This materially raises the risk that compatibility issues will go unaddressed.
The package declares nine runtime dependencies, including its framework and related Goldfinch components. This is a substantial integration surface but appears consistent with a Silverstripe dashboard module.
Only one registry account has publish access, limiting publishing resilience. The linked repository is user-owned rather than organization-owned, so there is no visible organizational backing to offset that concentration.
The registry namespace and repository owner match, which supports ownership continuity, but the owner is an individual account rather than an organization. That provides limited backing for long-term maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
goldfinch/taz Version ^2.0 | — | — |
bitbucket/client Version ^4.4 | — | — |
goldfinch/helpers Version ^2.0 | — | — |
goldfinch/dashcore Version ^1.0 | — | — |
silverstripe/admin Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.