The package has had no registry release in about two years, and the repository shows no commits or active maintainers in the past three months. MIT licensing, a matching source repository, release notes for 2.0.0, and no install scripts provide useful transparency and reduce adoption risk.
64%
Total Score
50
100
90
100
The package has six releases over about six years, but none in the last 12 months and the latest registry release was about two years ago. This indicates slow or stalled delivery for a package that integrates with a changing CMS ecosystem.
The repository recorded zero commits and zero active maintainers in the past three months. The repository is not archived, but the recent absence of observed work still raises maintenance risk.
There were no new or closed issues and no merged pull requests in the past month, despite 14 open issues and four open pull requests. This supports the concern that maintenance is currently quiet.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/cms Version ^4 | — | — |
getkirby/composer-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.