It has clear organizational ownership, a matching source repository, and a usable README. There is no security policy or automated security scanning, while the small registry maintainer base limits publishing resilience.
40%
Total Score
50
64
83
The latest release was more than seven years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a package developers may need to maintain alongside current dependencies.
The repository recorded no commits and no active maintainers in the last three months. Together with the old last push and release, this indicates that maintenance capacity is currently absent.
The artifact contains a license file, but it is detected as MIT while the manifest declares BSD-3-Clause. The mismatch creates avoidable legal uncertainty despite the presence of licensing information.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tools are configured, leaving a modest transparency and maintenance-hygiene gap.
The linked repository is not archived, so the project has not been formally marked inactive. Its last push was in July 2019, however, which is consistent with the stale release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ^3.2 | — | — |
silverstripe/tagfield Version ^1.3.1 | — | — |
silverstripe/framework Version ^3.2 | — | — |
tractorcow/silverstripe-opengraph Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.