The package has a clear README, MIT licensing, and release notes for this version. Its small five-file footprint and lack of install scripts make it easy to inspect, but ongoing support is not evident.
15%
Total Score
0
100
64
83
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption concern because the registry explicitly signals that dependency use should move away from it.
No commits or active maintainers were recorded in the last three months, consistent with the archived repository and abandoned registry status. There is no observed recent development capacity to compensate for that inactivity.
The linked repository is archived and was last pushed over two years ago. An archived source project is a strong abandonment signal for a package that may need compatibility fixes.
Only two releases exist, both published within about four days, and there have been no releases in the last 12 months. The brief release history provides little evidence of sustained maintenance.
The repository has no security policy. This is a transparency gap, although the package is very small and its file tree is straightforward.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/cms Version ^4.1 | — | — |
getkirby/composer-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.