The package is clearly licensed, documented, and tied to a matching source repository. Its small footprint and absent security policy provide limited support for long-term maintenance.
45%
Total Score
33
100
78
75
The package has had no registry release in more than seven years, with zero releases in the last 12 months. The four-release history shows an established initial release but not ongoing maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the old registry release, this is strong evidence that maintenance has effectively stopped.
The registry namespace and repository are owned by the same individual account, which is consistent with a small independent project. It provides no organizational maintenance cushion.
There are six open issues and ten open pull requests, with no new or closed issues or merged pull requests in the last month. The backlog and lack of recent resolution weaken maintenance confidence.
The repository has 14 stars and 2 forks, indicating a small user and contributor footprint. Popularity is supporting evidence only, but this offers little independent evidence of durable maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.