The package has a clear README, a declared BSD license, a stable version, and no install-time scripts. Its matching repository and small scope help, but current maintenance evidence is limited.
58%
Total Score
50
88
The latest registry release was in August 2018, with no releases in the past 12 months. This is a substantial maintenance concern, though the package has three prior releases and remains non-deprecated.
The repository had no commits and no active maintainers in the past three months. The 2024 push provides limited counterevidence, but ongoing maintenance is not demonstrated.
There were no new or closed issues or pull requests in the past month, while three pull requests remain open. This suggests limited current project activity.
Composer is used for the build, but no security scanning tools are present. For this small package, that is a modest transparency and hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ^4 | — | — |
silverstripe/framework Version ^4 | — | — |
silverstripe/vendor-plugin Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.