Usable with caveats: the package is clearly identified, licensed, and not deprecated, with a focused dependency profile and a substantial README. However, it was released only hours ago and has no demonstrated commit history, so its maintenance track record is not yet established.
64%
Total Score
50
100
88
83
All four releases were published within a few hours, so the package has almost no observed release history or long-term maintenance evidence.
There were no commits or active maintainers in the preceding three months, leaving no demonstrated maintenance capacity; the repository's very recent creation explains this but does not establish future support.
Composer is used for the build, but no security scanning tools are configured. This is a modest transparency gap for a small package, not evidence that the package is unsafe.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ^5 || ^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.