A small contributor base, no security policy, and no security scanning reduce confidence in ongoing care. The package is clearly licensed, documented, non-deprecated, and has a matching source repository.
58%
Total Score
50
100
83
83
Only one registry account has publish access, which leaves limited visible publishing capacity. The repository is user-owned, so there is no organizational backing signal to offset that thin maintainer base.
The registry namespace and repository owner match, and the owner is an individual account. This supports ownership consistency but does not provide the resilience of organization backing.
The latest release was in March 2023, with no releases in the last 12 months despite the package being over three years old. This is meaningful evidence of stalled maintenance, although the six-release history shows it was previously published actively.
There have been no new or closed issues or pull requests in the last month, and no pull requests were merged. This supports the conclusion that the project currently has little visible activity.
The repository has zero stars, forks, and watchers, providing no community evidence to compensate for the long period without releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
unclecheese/display-logic Version ^2.0 | — | — |
dnadesign/silverstripe-elemental Version >=3 | — | — |
silvershop/silverstripe-hasonefield Version ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.