The package has a clear README, a detected MIT license, release notes, and a small dependency surface. Choose the named replacement package instead of adding this release.
10%
Total Score
0
100
50
75
Packagist marks the package abandoned at package scope and names jacksleight/statamic-lazy-logo as its replacement. This is a direct warning against taking a new dependency on this package.
The package has only three releases, with none in the last 12 months; its latest release was in September 2021. That long release gap supports the abandonment concern.
There were no commits and no active maintainers in the last three months. This is consistent with the repository being archived and provides no evidence of ongoing maintenance.
The linked repository is archived, so its source is no longer actively maintained through the normal repository workflow. Its last push was on 2024-11-27, which does not offset the archived status.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap, while the build tooling provides limited positive evidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.