The README is detailed, and the two runtime dependencies keep integration relatively straightforward. A single publisher and no visible community activity limit confidence in long-term support.
70%
Total Score
50
100
89
83
Only one registry publisher is listed. Recent release activity partly compensates, but a single publishing account leaves limited visible continuity if that maintainer stops contributing.
The repository is owned by an individual user rather than an organization, offering less visible institutional backing. Recent releases provide some compensation, but not a broader support signal.
The repository has no open issues or pull requests and recorded no issue or pull-request activity in the last month. This may reflect a small, quiet project rather than abandonment, so the effect is limited.
The repository has zero stars, forks, and watchers. Popularity is not required for health, but these counters provide no supporting evidence of community adoption or review.
Composer is used for builds, but no security scanning tools are configured. This is a transparency and maintenance gap, though it does not by itself make the release unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
thinkcmf/cmf Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.