This release appears suitable to depend on: it is actively released, stable, non-deprecated, backed by a non-archived repository, and has a clear MIT license. The main reservations are that recent repository activity consists of only one commit from a single contributor, there are no repository tests or security-scanning tools, and no security policy is published; these reduce maintenance resilience and transparency but do not outweigh the strong release cadence and current repository state. The package is also small and primarily composed of Kirby blueprints and configuration, so the absence of tests is less concerning than it would be for a complex library.
78%
Total Score
63
50
88
90
The package declares nine runtime dependencies, including Kirby CMS and several field/plugin packages. This is a meaningful integration surface and can increase compatibility maintenance burden, but the signal does not show an excessive or obviously unmanaged dependency set.
A changelog is present in both the artifact and repository, but there is no README content beyond a short title and neither side contains tests. For a small blueprint/configuration package, missing tests are partly expected, while the very limited documentation remains a modest hygiene gap.
The repository is owned by an individual user rather than an organization, so there is no organizational succession evidence to offset the concentrated maintainer base.
All recent commits come from a single contributor with a 100% share, leaving the project dependent on one maintainer and increasing continuity risk.
The repository recorded one commit in the last three months from one active maintainer. Recent activity exists, but the low volume indicates limited demonstrated maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/cli Version ^1.8 | — | — |
getkirby/cms Version ^5.0 | — | — |
bnomei/kirby-janitor Version ^5.0 | — | — |
tobimori/kirby-icon-field Version ^2.3 | — | — |
sylvainjule/colorextractor Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.