This is a usable but still immature package with good artifact hygiene: it includes a substantial README, tests, a small runtime dependency surface, no install-time scripts, and a repository that is neither archived nor mismatched with the package. However, it has only 170 days of history, remains on the 0.x line, provides no license declaration or license file, and shows no commits or active maintainers in the last 3 months. The recent release activity is encouraging, but the lack of observed repository activity and security policy makes this a dependency to adopt with monitoring rather than one with strong long-term maintenance assurance.
56%
Total Score
50
100
78
90
Neither a declared license nor a license file was found, leaving the legal terms for redistribution and use unclear. This is a genuine transparency concern rather than an ecosystem-specific omission.
The repository is owned by an individual user rather than an organization. This does not imply poor health, but it offers less visible organizational backing to offset the thin observed maintenance activity.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, a meaningful maintenance concern. The very recent release and push provide partial compensation, but do not establish sustained ongoing development.
There were no new or closed issues or pull requests in the last month, while the total issue and pull-request counts are unavailable. This provides little evidence of an active user or maintainer feedback loop.
The repository has only 4 stars and no forks or watchers, indicating limited external adoption or review. Popularity is supporting evidence rather than a verdict, so this is a modest concern for a package with otherwise credible structure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.