Usable with caveats: it is a small, clearly packaged, licensed module with a current stable release and a matching source repository. Maintenance is sparse, with only one release in the last year and no commits in the last three months, so verify compatibility before adopting it.
68%
Total Score
50
100
83
90
Only one registry account has publish access, which creates limited publishing redundancy; the matching repository and recent release provide some compensating evidence.
The package registry namespace and repository owner are different individual/user contexts rather than an identified organization-backed project, so the single registry maintainer provides limited redundancy.
The project has existed for about 7 years and has a latest release in December 2025, but only one release occurred in the last 12 months and releases are typically about 324 days apart, indicating a slow cadence.
The repository had no commits and no active maintainers in the last three months, which is the clearest maintenance concern despite the recent December 2025 release.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is orderly, but it also provides little evidence of an active user or maintainer community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ^6 | — | — |
silverstripe/userforms Version ^7 | — | — |
silverstripe/vendor-plugin Version ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.