Site-scoped public choir directory profiles for Statamic.
68%
Total Score
caution
A very new package with no sustained activity and fully unpinned workflow actions remains a maintenance and build-reproducibility risk.
One registry maintainer is consistent with the linked repository being owned by the same individual, though it provides little redundancy if that maintainer becomes unavailable.
The package and repository are aligned under the same individual owner, supporting identity continuity, but there is no organization backing shown.
Only two releases appeared within less than one day, so there is not yet evidence of sustained maintenance or a dependable release pattern.
There were no commits or active maintainers in the preceding three months; the package is also only hours old, so this is limited evidence of sustained activity rather than proof of abandonment.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
goldnead/statamic-teams Version ^0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.