The package is small and focused, with a clear README, one runtime dependency, and a matching BSD-3-Clause license. Its single-person ownership and lack of security policy provide little maintenance or operational backup.
40%
Total Score
38
100
78
75
The package has had no release in about nine years and no releases in the last 12 months, which is strong evidence of abandonment for a maintained dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the last push being about nine years ago and creating a substantial abandonment risk.
Only one registry maintainer is listed, leaving little visible publishing redundancy; the individual repository ownership provides no organizational backup.
The repository is owned by an individual account rather than an organization, so the single-maintainer situation has no demonstrated organizational backing to compensate for it.
There has been no new or closed issue or pull request activity in the last month, with one issue still open; this supports the broader picture of an inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ~3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.