This is a mature, stable package with over eight years of release history, a current 2.0.1 release, recent repository activity, clear licensing, a matching source repository, and no deprecation or install-time lifecycle scripts. However, maintenance capacity appears thin: only one registry maintainer is listed, all commits in the last three months came from one contributor, and the artifact and repository contain neither tests nor a changelog. The repository is not archived and recent releases and pull-request activity provide some reassurance, but the package should be adopted with awareness of its limited visible maintainer redundancy and modest security and quality-process coverage.
68%
Total Score
60
100
88
88
Only one account has registry publish access. That is a genuine publishing-resilience concern, although registry access alone does not establish who actively maintains the code.
A README and documentation are present, and GitHub Releases are used, but neither the artifact nor repository has tests or a changelog. The missing tests and changelog reduce maintenance transparency for a library.
The source repository is owned by an individual user rather than an organization, so there is no provided organizational backing to offset the thin maintainer and contributor base.
All three-month commit activity is concentrated in one contributor, with a 100% top-contributor share. The user-owned repository has no organizational backing signal to compensate for this concentration.
There was one commit in the last three months from one active maintainer. Recent activity exists, but its low volume provides only limited evidence of sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ^6 | — | — |
unclecheese/display-logic Version * | — | — |
giggsey/libphonenumber-for-php Version ^8 || ^9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.