Usable with caveats: it is a stable, licensed package with tests, release notes, and organization backing, but the last release was nearly five years ago and the repository has had no recent commits. Verify compatibility with current CMS and Elasticsearch versions before adopting it.
58%
Total Score
75
100
78
90
The package has six releases since October 2018, but it has had no release in the last 12 months and its latest release was in October 2021, nearly five years ago. This is a meaningful maintenance concern despite the earlier regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release, this indicates little current maintenance capacity.
The repository name does not exactly match the package name and its README does not mention the package. Because this is a cautionary ownership signal even though the repository path is otherwise plausible, confirm that the repository is the intended source.
The repository has no stars or forks and only four watchers, providing little community evidence or outside visibility. Popularity is supporting evidence, so this lowers confidence in project maturity but is not severe by itself.
Composer and Phing build tooling are present, showing a reproducible build setup, but no security scanning tools are configured. The tooling is adequate for packaging while leaving a modest transparency gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
papaya/cms-core Version 7.0 | — | — |
papaya/module-actions Version 1.* | — | — |
papaya/module-default Version 1.* | — | — |
papaya/module-default-cronjobs Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.