Usable with caveats: this long-lived, clearly backed Craft CMS starter has a license, documentation, and matching source repository, but the assessed beta release is behind the stable 5.2.2 line and the registry shows no release in roughly 16 months. Recent repository activity is also absent, so verify compatibility and maintenance plans before adopting it.
60%
Total Score
75
50
81
75
The starter package declares 23 runtime dependencies, including many CMS plugins, which increases upgrade and compatibility burden for adopters.
The post-create-project-cmd and post-root-package-install scripts fit this package's documented create-project workflow, but they still add install-time behavior that should be reviewed before use.
The package has a long history with 87 releases, but it has had no release in roughly 16 months despite the assessed version being an older beta.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of limited recent maintenance despite the non-archived status.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ether/tags Version ^1.0 | — | — |
craftcms/cms Version ^3.6 | — | — |
misterbk/mix Version ^1.5 | — | — |
craftcms/feed-me Version ^4.3 | — | — |
dolphiq/redirect Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.