This is a usable, actively published Craft CMS plugin with a stable 1.0.3 release, a non-archived organization-owned repository, a matching README reference, and no install-time lifecycle scripts or registry deprecation. However, maintenance capacity is thin: only one commit from one contributor was observed in the last three months, and the package has no tests, changelog, security policy, or declared workflow permissions. The repository is small and the license file is present, so these gaps do not make the package unfit, but they warrant review and monitoring before adopting it as a critical dependency.
68%
Total Score
60
100
83
80
One registry account has publish access. That is limited publishing redundancy, though the repository is owned by an organization, which provides some potential for maintenance handoff.
A substantial README is present, and the repository uses GitHub Releases, which partly compensates for the absence of a changelog. Tests are absent both from the artifact and repository, leaving a genuine maintenance-confidence gap.
All recent commits come from one contributor, creating a concentrated bus factor. Organization ownership offers potential handoff capacity, but no second active contributor was observed.
Only one commit from one active maintainer was recorded in the last three months. Recent release activity is a compensating sign, but the observed development pace remains thin.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently negative for a small package, but it provides little evidence of an engaged maintenance community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^5.3.0 | — | — |
symfony/yaml Version ^5.4|^6.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
openai-php/client Version ^0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.