Simple CMS Implementation for H2S framework
40%
Total Score
unhealthy
Risky: long inactivity, a single maintainer, and limited package transparency make this a weak dependency choice.
The manifest declares a proprietary license, with no detected license text or license file in the package or repository. That creates a real redistribution and dependency-policy concern.
Only one registry publisher account is listed. Because the repository owner is a user rather than an organization, there is little provided evidence of a broader publishing base.
The published package has no README, tests, or changelog, and the repository reports none either. The tiny configuration-oriented file tree makes missing tests less concerning, but the absent README still reduces consumer transparency.
Only two releases have been published, and none appeared in the last 12 months; the latest release was about 16 months ago. This points to limited maturity and possible abandonment.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is meaningful evidence of stalled maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.