Its source tree is compact and coherent, with recent releases and no install-time scripts. The missing README and security policy leave consumers with less guidance.
61%
Total Score
50
100
79
83
The package declares a proprietary license and provides no license file, which limits transparency and may restrict dependable use in downstream projects.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a genuine consumer-documentation gap for a package integrated into a Statamic application.
The repository is owned by a user account rather than an organization, so the single-maintainer concentration is not compensated by visible organizational backing.
All four recent commits came from one contributor, leaving maintenance dependent on a single person with no demonstrated handoff capacity.
Four commits from one active maintainer in the last three months show some ongoing work, but the modest activity provides limited evidence of sustained maintenance capacity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.