Usable with caveats: it is actively maintained and clearly packaged, but the project is only 11 days old and all recent commits come from one contributor. The absence of tests and a security policy adds avoidable maintenance risk.
68%
Total Score
67
100
75
88
The package includes a substantial README and changelog, but neither the artifact nor repository contains tests. For a CMS plugin handling export and import workflows, that is a meaningful maintenance gap.
The repository is owned by an individual user rather than an organization. That matches the single-contributor activity and means there is no visible organizational maintenance buffer.
The package is only 11 days old with three releases, including one within the last day. This shows active early development but provides little long-term evidence of stability.
One contributor made all three recent commits, leaving the project dependent on a single maintainer and creating a real continuity risk.
The repository has no stars, forks, or watchers. Because the package is only 11 days old, this is weak supporting evidence rather than a severe concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^5.9.0 | — | — |
moneyphp/money Version ^4.0 | — | — |
phpoffice/phpspreadsheet Version ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.